Edit tour

Windows Analysis Report
http://www.painrehabilitation.com.au/contact.html

Overview

General Information

Sample URL:	http://www.painrehabilitation.com.au/contact.html
Analysis ID:	1431975
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,13903977276752297050,1803456697234074248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.painrehabilitation.com.au/contact.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: Iframe src: https://a8447815042.cdn-pci.optimizely.com/client_storage/a8447815042.html
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: Iframe src: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade#Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU=
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: Iframe src: https://squareup.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: Iframe src: https://a8447815042.cdn-pci.optimizely.com/client_storage/a8447815042.html
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: Iframe src: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade#Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU=

Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts

HTTP Parser: Base64 decoded: ;/*FB_PKG_DELIM*/var dataElement=document.getElementById("envjson");if(dataElement!=null){var copyVariables=function(a){for(var b in variables)a[b]=variables[b]},variables=JSON.parse(dataElement.textContent);window.requireLazy?window.requireLazy(["Env"]...

Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	HTTP Parser: <input type="password" .../> found
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: <input type="password" .../> found

Source: http://www.painrehabilitation.com.au/contact.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/contact.html	HTTP Parser: No favicon
Source: https://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false	HTTP Parser: No favicon
Source: https://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false	HTTP Parser: No favicon
Source: https://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/about-us.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/about-the-program.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/health-professionals.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/health-professionals.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/research.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/our-partners.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/blog	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/blog	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/blog	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/blog	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=http%3A%2F%2Fwww.painrehabilitation.com.au	HTTP Parser: No favicon
Source: https://www.facebook.com/v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfe201db235e547120%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog&size=m&text=How%20can%20yoga%20help%3F%20Part%20Three%20-%20Brisbane%20Pain%20Rehabilitation%20Service&time=1714104690132&type=share&url=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html#dnt=false&id=twitter-widget-2&lang=en&original_referer=http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog&size=m&text=How%20Can%20Yoga%20Help%3F%20-%20Brisbane%20Pain%20Rehabilitation%20Service&time=1714104690134&type=share&url=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help.html	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html#dnt=false&id=twitter-widget-1&lang=en&original_referer=http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog&size=m&text=How%20Can%20Yoga%20Help%3F%20Part%20Two%20-%20Brisbane%20Pain%20Rehabilitation%20Service&time=1714104690133&type=share&url=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html	HTTP Parser: No favicon
Source: https://www.facebook.com/v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb6089b8481d16d69%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90	HTTP Parser: No favicon
Source: https://www.facebook.com/v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df8f69f638f7349a7a%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/referrals.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/referrals.html	HTTP Parser: No favicon
Source: http://www.painrehabilitation.com.au/questionnaire.html	HTTP Parser: No favicon
Source: https://squareup.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0	HTTP Parser: No favicon
Source: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade#Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU=	HTTP Parser: No favicon
Source: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade#Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU=	HTTP Parser: No favicon
Source: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade#Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU=	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpyw	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/984344943?random=1714104722646&cv=11&fst=1714104722646&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/984344943?random=1714104722664&cv=11&fst=1714104722664&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/984344943?random=1714104722660&cv=11&fst=1714104722660&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/984344943?random=1714104722667&cv=11&fst=1714104722667&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse	HTTP Parser: No favicon
Source: https://12345.fls.doubleclick.net/activityi;dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?	HTTP Parser: No favicon
Source: https://9628652.fls.doubleclick.net/activityi;dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1?	HTTP Parser: No favicon
Source: https://9628652.fls.doubleclick.net/activityi;dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1?	HTTP Parser: No favicon
Source: https://9628652.fls.doubleclick.net/activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly....	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=lb8beig&ref=https%3A%2F%2Fsquareup.com%2F&upid=wf1vc7l&upv=1.1.0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3353354537123624800&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3785399365866252566&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f	HTTP Parser: No favicon

Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	HTTP Parser: No <meta name="author".. found
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: No <meta name="author".. found
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	HTTP Parser: No <meta name="copyright".. found
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: No <meta name="copyright".. found
Source: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:10:47 GMTServer: ApacheSet-Cookie: is_mobile=0; path=/; domain=www.painrehabilitation.com.auVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:10:47 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"8053e048fac939ead127dd802dfa270a-gzip"Content-Encoding: gzipX-Host: grn54.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7518Keep-Alive: timeout=10, max=60Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f ed f7 f6 3f a0 99 19 53 ee d6 41 dd d6 99 71 1c a7 3b f3 72 b8 63 67 b2 f3 e2 ac 1e 44 42 12 13 8a 64 48 ca 8e c6 d1 7f df 2a 00 bc 24 d2 96 e2 a4 a7 67 d7 3d 13 91 04 0a 85 2a a0 50 a8 c2 51 ee ff f4 f4 f5 c9 c5 3f cf 4e c9 2c 98 5b c3 fd 3e 3e 88 45 ed e9 40 61 b6 32 dc df eb cf 18 35 e0 b9 d7 0f cc c0 62 c3 13 c7 0e a8 1e 90 12 79 e2 99 fe 98 da 8c 9c 51 d3 26 6f d8 8c 8e 4d cb 0c 68 60 3a 36 39 67 de 95 a9 b3 7e 45 94 ea cf 59 40 89 eb 39 2e f3 82 e5 40 71 a6 5d df 0c d8 c8 a6 73 a6 10 1d 70 32 3b 18 28 db a0 54 48 05 e8 dc c4 c7 2b 4a e0 92 84 e6 81 1b cc d7 3d d3 45 cc c9 42 d4 76 7c 9f 92 33 cf bc a2 01 23 bf 39 be 0b f5 5b a4 da ea 00 01 57 00 c4 98 4d 5e 9a 16 23 6f 1c fd 93 0f bf d4 20 af bf 58 6c 49 7e 7f f1 94 34 b4 76 33 af 4a 73 4e a7 49 0a 67 41 e0 76 2b 95 eb eb eb b2 0b fc 7a 29 76 cb ba 33 2f d3 45 65 e1 5a 50 83 5f a9 56 b4 4a bd d2 aa 54 b5 7a ab 5e 3d 6a 56 9a cd 3a bc 75 ca 1f dd e9 1f 54 61 a7 de 69 b7 1b 58 e1 e3 5a 53 fb 63 2a 1d bb 9e 5f b2 9c a9 73 1b 9f 0b cf da b5 42 5d 48 47 19 e5 9d a3 85 ff 04 66 2c 5e 62 9f 17 e6 95 90 21 c0 59 ba 58 ba 49 96 02 f6 25 a8 60 c9 1e d1 67 d4 f3 59 30 58 04 93 d2 91 12 91 87 72 3d 50 ae 4c 76 ed 3a 5e 90 28 7a 6d 1a c1 6c 60 30 94 e4 12 ff 28 12 d3 36 03 93 5a 25 5f a7 16 1b 54 cb 5a 71 0e 49 73 48 59 98 30 04 61 ec e1 f0 b3 4c fb 13 31 0d 40 81 23 a7 34 a6 3e 2b f9 c1 12 65 de 63 d6 40 e1 ef fe 8c 31 a8 2e 00 7a 25 99 ba ef 2b 64 e6 b1 c9 40 a9 54 74 c3 ae 95 99 61 06 f3 25 22 c1 c6 40 80 0a 7e f8 65 78 7b 3c 5e 98 96 71 61 02 f5 d5 56 a3 51 6f 55 8f 1a 35 d1 ec bc fe 7b d7 e4 58 46 65 42 6d 7d 39 76 be f0 0a 7f 4c 35 be a3 63 8b 9a d0 ee 09 be 82 75 be e6 50 94 42 4d ba 07 a3 ba 08 32 f5 91 e9 42 23 ec 4c ca 04 54 82 5f 99 83 c0 8d 38 74 cc 5c bb 0d ca 03 ca a1 7e 0a 7b 2f 98 b1 39 2b f1 f2 51 4d 1c 91 5a a9 4c 40 56 fc f2 d4 71 a6 16 a3 ae e9 87 4c 3d 9e d0 b9 69 2d 07 27 20 ce 76 b7 a1 69 c5 36 fc 83 27 2a 28 53 c7 2f f1 76 e0 2f c6 28 93 16 48 bc 5d e4 bf 25 20 57 e5 bc a8 31 2f aa e0 45 0d 79 51 77 a7 e5 25 e6 33 cf a3 41 48 d0 bd 2a df ef 73 80 f5 ac e1 7e 59 34 1b b3 a0 d9 90 22 f1 69 3b 41 69 e2 38 01 f3 ba f0 5a 90 a9 Data Ascii: =iw8?SAq;rcgDBdH$g=PQ?N,[>>E@a25byQ&oMh`:69g~EY@9.@q]sp2;(TH+J=EBv\|3#9[
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:10:47 GMTServer: ApacheSet-Cookie: is_mobile=0; path=/; domain=www.painrehabilitation.com.auVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:10:47 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"8053e048fac939ead127dd802dfa270a-gzip"Content-Encoding: gzipX-Host: grn54.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7518Keep-Alive: timeout=10, max=60Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f ed f7 f6 3f a0 99 19 53 ee d6 41 dd d6 99 71 1c a7 3b f3 72 b8 63 67 b2 f3 e2 ac 1e 44 42 12 13 8a 64 48 ca 8e c6 d1 7f df 2a 00 bc 24 d2 96 e2 a4 a7 67 d7 3d 13 91 04 0a 85 2a a0 50 a8 c2 51 ee ff f4 f4 f5 c9 c5 3f cf 4e c9 2c 98 5b c3 fd 3e 3e 88 45 ed e9 40 61 b6 32 dc df eb cf 18 35 e0 b9 d7 0f cc c0 62 c3 13 c7 0e a8 1e 90 12 79 e2 99 fe 98 da 8c 9c 51 d3 26 6f d8 8c 8e 4d cb 0c 68 60 3a 36 39 67 de 95 a9 b3 7e 45 94 ea cf 59 40 89 eb 39 2e f3 82 e5 40 71 a6 5d df 0c d8 c8 a6 73 a6 10 1d 70 32 3b 18 28 db a0 54 48 05 e8 dc c4 c7 2b 4a e0 92 84 e6 81 1b cc d7 3d d3 45 cc c9 42 d4 76 7c 9f 92 33 cf bc a2 01 23 bf 39 be 0b f5 5b a4 da ea 00 01 57 00 c4 98 4d 5e 9a 16 23 6f 1c fd 93 0f bf d4 20 af bf 58 6c 49 7e 7f f1 94 34 b4 76 33 af 4a 73 4e a7 49 0a 67 41 e0 76 2b 95 eb eb eb b2 0b fc 7a 29 76 cb ba 33 2f d3 45 65 e1 5a 50 83 5f a9 56 b4 4a bd d2 aa 54 b5 7a ab 5e 3d 6a 56 9a cd 3a bc 75 ca 1f dd e9 1f 54 61 a7 de 69 b7 1b 58 e1 e3 5a 53 fb 63 2a 1d bb 9e 5f b2 9c a9 73 1b 9f 0b cf da b5 42 5d 48 47 19 e5 9d a3 85 ff 04 66 2c 5e 62 9f 17 e6 95 90 21 c0 59 ba 58 ba 49 96 02 f6 25 a8 60 c9 1e d1 67 d4 f3 59 30 58 04 93 d2 91 12 91 87 72 3d 50 ae 4c 76 ed 3a 5e 90 28 7a 6d 1a c1 6c 60 30 94 e4 12 ff 28 12 d3 36 03 93 5a 25 5f a7 16 1b 54 cb 5a 71 0e 49 73 48 59 98 30 04 61 ec e1 f0 b3 4c fb 13 31 0d 40 81 23 a7 34 a6 3e 2b f9 c1 12 65 de 63 d6 40 e1 ef fe 8c 31 a8 2e 00 7a 25 99 ba ef 2b 64 e6 b1 c9 40 a9 54 74 c3 ae 95 99 61 06 f3 25 22 c1 c6 40 80 0a 7e f8 65 78 7b 3c 5e 98 96 71 61 02 f5 d5 56 a3 51 6f 55 8f 1a 35 d1 ec bc fe 7b d7 e4 58 46 65 42 6d 7d 39 76 be f0 0a 7f 4c 35 be a3 63 8b 9a d0 ee 09 be 82 75 be e6 50 94 42 4d ba 07 a3 ba 08 32 f5 91 e9 42 23 ec 4c ca 04 54 82 5f 99 83 c0 8d 38 74 cc 5c bb 0d ca 03 ca a1 7e 0a 7b 2f 98 b1 39 2b f1 f2 51 4d 1c 91 5a a9 4c 40 56 fc f2 d4 71 a6 16 a3 ae e9 87 4c 3d 9e d0 b9 69 2d 07 27 20 ce 76 b7 a1 69 c5 36 fc 83 27 2a 28 53 c7 2f f1 76 e0 2f c6 28 93 16 48 bc 5d e4 bf 25 20 57 e5 bc a8 31 2f aa e0 45 0d 79 51 77 a7 e5 25 e6 33 cf a3 41 48 d0 bd 2a df ef 73 80 f5 ac e1 7e 59 34 1b b3 a0 d9 90 22 f1 69 3b 41 69 e2 38 01 f3 ba f0 5a 90 a9 Data Ascii: =iw8?SAq;rcgDBdH$g=PQ?N,[>>E@a25byQ&oMh`:69g~EY@9.@q]sp2;(TH+J=EBv\|3#9[
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 1218Server: nginxContent-Type: text/cssLast-Modified: Tue, 16 Apr 2024 22:22:22 GMTETag: "661efa1e-f47"Expires: Wed, 01 May 2024 12:26:20 GMTCache-Control: max-age=1209600X-Host: blu89.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishAccept-Ranges: bytesAge: 747867Date: Fri, 26 Apr 2024 04:10:47 GMTX-Served-By: cache-sjc1000110-SJC, cache-gnv1820034-GNVX-Cache: HIT, HITX-Cache-Hits: 142, 0X-Timer: S1714104648.728766,VS0,VE1Vary: Accept-EncodingAccess-Control-Allow-Origin: *alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 57 dd 72 a3 36 14 be ef 53 b0 f1 74 66 b3 63 61 20 f6 6e 16 ae da 8b 4c af fa 0a 1d 01 c2 56 23 24 46 c8 8e 5d ea 77 ef 91 04 46 20 93 ec 36 9e d8 92 90 ce cf 77 be 73 74 d8 7c f9 14 54 98 17 97 df c5 39 38 25 61 1c 46 76 8e 9b a6 0d 0b 51 07 ff 4e e7 1b 33 cb c5 79 b3 62 b4 20 bc 25 c1 97 4d 38 2c a2 37 89 9b f5 38 6d 5f 29 77 a6 e2 a8 88 74 e6 94 f3 e9 bc c6 7b b2 9e 4a 0b 68 25 71 ed ad 8a fc 6f 52 28 67 95 e3 d3 74 16 b4 0d 76 95 ab ba e9 1a 5c 96 94 ef d3 28 ab b1 dc 53 0e 83 5c c8 92 48 18 80 71 8c 72 92 72 c1 49 76 22 52 d1 02 33 84 19 dd f3 54 89 e6 3a 35 a0 6b 44 4b 15 15 3c c5 79 2b 18 38 96 c1 26 10 c3 48 a5 e0 e7 1f 70 ae 24 e7 f4 39 4a a2 eb 14 90 f1 a8 24 0c 2b 7a 22 59 8e 8b d7 bd 14 47 5e a6 ab ea bb fe 64 85 60 42 a6 ab ed 76 9b 29 72 56 a8 3d e0 52 bc 59 eb ac cd 48 e2 92 1e db 74 db 9c 1d 0d a2 21 9c 94 dd a8 ff 29 f2 9e 06 33 83 cc c0 ca 8f 82 38 6a ce 41 b2 83 2f b9 cf f1 e7 68 6d 3e e1 ee f1 fa 41 20 7d bf ae f3 1d 02 70 ad 18 a8 39 d0 b2 24 dc 79 ae 2e 0d 41 36 d4 c1 fc 14 7a 23 f9 2b 55 68 38 8d da 42 0a c6 74 20 95 38 16 07 47 0c 91 52 c8 ce c1 ae 12 5c a5 31 40 b4 49 b4 5f 0f 7f 10 76 22 3a b4 c1 9f e4 48 1e d6 b7 f9 fa 37 49 31 5b b7 98 b7 a8 25 92 56 23 45 06 d6 c4 00 4a f6 76 a0 8a 20 e0 56 a1 a9 a2 a9 70 5d 26 b0 75 a8 2b 69 db 30 7c 49 73 26 8a d7 ec 8d 96 ea 90 c6 51 f4 6b 76 20 74 7f 50 66 3c 97 d2 d5 18 98 36 6e d5 53 77 fb ea b6 9d 09 ac cd 73 d4 16 4c b4 ae 19 8d 24 5e 3a 70 20 95 59 eb 46 f2 59 cd e9 51 b2 cf 0f 1b 33 6e 37 82 95 63 ce 0f 83 bf da 46 02 0c 61 c3 f7 0f 8f be 29 23 13 2a 7a 26 a5 c9 8c 1d f8 60 72 63 67 9c d1 d0 22 bd 8e 92 04 50 ed 17 cc 06 bb e2 58 75 93 16 05 28 8e 9e e1 a1 00 f8 a9 ba a4 51 f8 9c 15 47 d9 42 b4 1b 41 39 90 d2 49 bc af 91 6f 59 50 d2 53 67 51 dd 02 29 86 00 98 b1 93 84 3f 80 40 2f 30 dc d3 ea e1 31 80 4a 08 ca 87 1f Data Ascii: Wr6Stfca nLV#$F]wF 6wst\|T98%aFvQN3yb %M8,78m_)wt{Jh%qoR(gtv\(S\HqrrIv"R3T:5kDK<y+8&Hp$9J$+z"YG^d`Bv)rV=RYHt!)38jA/hm>A }p9$y.A6z#+Uh8Bt 8GR\1@I_v":H7I1[%V#EJv Vp]&u+i0\|Is&Qkv
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 1639Server: nginxContent-Type: text/cssLast-Modified: Thu, 18 Apr 2024 21:03:21 GMTETag: W/"66218a99-3319"Expires: Fri, 03 May 2024 05:39:52 GMTCache-Control: max-age=1209600X-Host: blu61.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishAccept-Ranges: bytesAge: 599455Date: Fri, 26 Apr 2024 04:10:47 GMTX-Served-By: cache-sjc10066-SJC, cache-pdk-kpdk1780100-PDKX-Cache: HIT, HITX-Cache-Hits: 115, 0X-Timer: S1714104648.733276,VS0,VE1Vary: Accept-EncodingAccess-Control-Allow-Origin: alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a cb 72 ea 38 10 dd cf 57 64 c8 e6 a6 2a 24 d8 90 00 a6 a6 66 fe 61 b6 b3 91 6d 01 2a 6c 8b b1 45 08 37 95 7f 1f c9 f2 83 47 4b 6a 1b d7 5d 4d 56 29 bb cf e9 a3 3e 46 ef bf d6 3c 13 e3 35 89 e8 57 f5 5f ca 92 53 30 3a 16 3c 62 24 19 ad 8a 3c 0a 0e 79 f2 e3 f5 35 8a 33 ff 85 c6 4c a4 a7 82 09 fa 12 f1 f4 55 61 8a d7 e3 df 65 f0 6b 05 7a a1 5c fc 29 8a 3f bc b9 37 9d cd 67 fe c4 5b 4e a7 4f 83 31 3d 32 ba 66 9f 4f 0f 6b 9e a7 44 fc 18 d1 34 a4 71 4c e3 31 df d3 4c 9c f6 74 f4 f4 dc 35 cf 91 af d7 b7 92 9b 14 ea 75 0f 56 21 6c a4 22 3f d0 9e 72 8b 8f cd 6d 59 aa 97 6d 02 19 35 7a 5a 95 b6 1e 29 db 6c 45 90 a9 37 89 7e 54 88 53 42 ab 27 df 2f 47 95 71 ac 19 c6 71 ce c2 30 94 6f 43 2a b9 e8 57 24 e3 65 69 83 d1 3f f4 7d 12 8d ea 68 a9 6f bc cf 79 7c 88 44 47 64 15 1d f1 84 e7 0f 9d 72 af 4a 4c f0 b8 9e cc e7 64 72 c5 57 fc 7b 20 39 35 10 3e 43 b1 70 e8 57 48 a2 dd 26 e7 87 2c 1e f7 ce 17 90 b5 a0 79 87 ac 1a 60 6c 70 f9 77 25 20 25 2c 01 0b 35 b5 99 84 40 59 0c b2 a0 6b ad d3 f7 69 38 a5 98 62 29 32 44 89 54 18 60 4a b7 3c 68 43 da 60 53 03 41 33 54 27 1a 72 be 03 8b 33 b1 19 82 44 5a 4c 71 30 34 c6 84 6f cb e5 02 53 b0 9a 10 51 ae 3a 14 32 a8 73 3e b4 49 97 00 53 83 61 a3 12 16 ed f2 71 42 d7 02 ac 57 6c f5 0a 0d b6 d9 e5 24 a9 1b 30 99 bc 4f e3 08 55 c1 96 13 53 be 36 1a f0 ad 57 56 bc 75 d7 18 53 e3 6d ee e5 e5 80 06 15 8f 22 ec c3 a0 dd fe d9 58 da 36 4c 26 8b 59 87 52 96 a4 f8 2a 96 e1 d0 80 d5 2b 6f 57 0f cf 40 e6 02 18 4d 04 4b b7 70 db e7 c0 39 8d 33 e0 fb fe e6 d0 e5 1a e0 97 d6 d1 20 c8 9a 85 dd 9a 7d 72 28 c0 02 cd 6c c6 20 50 16 5b 2c e8 5a 6b 1c cf c2 e9 12 53 28 45 86 28 90 0a 03 0c e9 96 07 6d 47 1b 6c 6a 20 68 06 cb 0a 41 36 39 49 c1 ea cc 6d 8e 60 a1 16 5b 5c 14 cd b4 62 3d f7 97 21 a6 66 0d 23 a2 64 4d 2c 34 b1 e8 9e 11 6d d5 15 c2 d4 68 d0 af 84 65 3b b9 Data Ascii: Zr8Wd$famlE7GKj]MV)>F<5W_S0:<b$<y53LUaekz\)?7g[NO1=2fOkD4qL1Lt5uV!l"?rmYm5zZ)lE7~TSB'/Gqq0oCW$ei?}hoy\|DGdrJLdrW{ 95>CpWH&,y`lpw% %,5@Yki8b)2DT`J<hC`SA3T'r3DZLq04oSQ:2s>ISaqBWl$0OUS6WVuSm"X
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 25752Server: nginxContent-Type: application/javascriptLast-Modified: Fri, 19 Apr 2024 17:48:10 GMTETag: "6622ae5a-124fe"Expires: Sun, 05 May 2024 10:09:56 GMTCache-Control: max-age=1209600X-Host: grn151.sf2p.intern.weebly.netContent-Encoding: gzipVia: 1.1 varnish, 1.1 varnishAccept-Ranges: bytesDate: Fri, 26 Apr 2024 04:10:51 GMTAge: 410455X-Served-By: cache-sjc10061-SJC, cache-pdk-kpdk1780147-PDKX-Cache: HIT, HITX-Cache-Hits: 1, 8917X-Timer: S1714104651.401669,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 7d 6b 7b da c8 92 f0 e7 33 bf c2 d6 d9 f5 48 43 1b 03 be 06 ac 78 6d 27 76 ee c9 24 76 9c 84 30 7e 1a 10 20 0c 08 24 71 b3 61 7f fb 5b 55 7d 51 4b e0 24 73 ce ee be e7 64 8c d4 97 ea ee ea ea ba 75 a9 db 6e 8d 07 8d d8 0f 06 1b 9e 5d 67 6d d6 74 1e 74 4a c3 1e b0 ae f3 e0 b7 ec cd 76 75 50 13 4f 75 7a 9a f0 70 c3 77 e3 f9 d0 0b 5a 1b a1 37 1a fb a1 e7 ba 96 aa 6a 6d 6d c9 c4 0a d6 e9 6e 6d f9 ce 43 e8 c5 e3 70 b0 e1 03 d4 cd 82 b3 84 0c ae 13 b9 4c 44 b8 7d 77 e0 4d 37 9e 87 61 10 da d6 39 1f 0c 82 78 a3 e5 0f 9a 1b fd a0 39 ee 79 1b bf 5b b9 41 ce fa dd 72 2a 71 27 0c a6 1b fd 7c 23 68 7a ae f5 f6 fd b3 eb 37 cf 6f df bd bf ba bd 78 7f fd ee 99 c5 fa 04 af e3 62 ef dd 07 6f 36 0c c2 38 2a 3f 2c 97 15 1c 45 b5 50 cb 37 78 af 67 77 f2 32 8b a9 fe db 3d 31 c4 c0 a5 82 c5 5a b5 57 ab c8 ae 36 ec e0 24 28 f7 9c 25 eb b0 a4 a6 c7 04 f6 96 b2 14 36 a9 32 a9 17 fc 97 b0 d5 82 31 63 e9 96 5b a8 b4 8e 9b f9 9e 37 68 c7 9d 4a 2b 97 73 1e 1a 76 b3 da aa e9 16 1a 4b c7 7e 28 96 ab ba cf 12 06 13 68 62 b2 71 31 90 57 9f de bf a3 a9 c0 07 e7 01 ff ba 80 07 5b 57 16 c5 da bd a0 ce 7b ee 85 4a b5 64 5b 71 c7 8f 2c c7 76 18 55 14 a5 f2 8f c0 d4 e4 d3 b2 07 7a 7e 07 c7 c5 c2 89 55 80 99 2b 0f 70 e6 25 2e 9e f1 d8 cb 0f c3 20 0e 30 21 1f 07 08 64 d3 44 8d f3 b0 b6 8c ab 3b 7e e7 cd 13 d2 8a 2e fc 81 1f 7b 36 f6 37 3f e1 bd b1 f7 be 65 3b ce 09 bd b7 bd f8 fa ea fc 62 dc eb 7d f5 78 68 3b 39 6b db ca b5 6c 23 ef 6d 30 88 3b 90 51 5c 93 87 dd 00 50 39 eb 2a 93 f1 22 18 87 11 e5 94 b3 e0 fc c1 38 f6 d6 e7 7d f2 1a c1 a0 29 f2 be 59 e5 01 f4 ea b7 65 e5 53 1c fa 83 f6 ea 68 df 8d fb 75 2f 5c 4d 3f 0b 82 9e c7 07 bf 88 9e 34 56 96 44 96 8d 99 bb 53 fd 3e 2e c0 ff f0 2f 6f c2 df 83 42 61 9b 7e f6 e0 ef 61 a1 f5 7d 5c 3c ac ef d1 df fd ef e3 52 a1 Data Ascii: }k{3HCxm'v$v0~ $qa[U}QK$sdun]gmttJvuPOuzpwZ7jmmnmCpLD}wM7a9x9y[Arq'\|#hz7oxbo68?,EP7xgw2=1ZW6$(%621c[7hJ+svK~(hbq1W[W{Jd[q,vUz~U+p%. 0!dD;~.{67?e;b}xh;9kl#m0;Q\P9
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 1488X-GUploader-UploadID: ABPtcPrZvm6VLwtsUOSQMA8nbynKNceOpLp0vg5AByS6nH1QO7mlGooqLkPAq2pmDTB2Qg-8R-c9LHqTwwCache-Control: public, max-age=86400, s-maxage=259200Expires: Sat, 27 Apr 2024 06:04:10 GMTLast-Modified: Wed, 10 Oct 2018 21:37:00 GMTETag: "bc61dcb431a14c508075eeff4f74523a"x-goog-generation: 1539207420450301x-goog-metageneration: 3x-goog-stored-content-encoding: identityx-goog-stored-content-length: 3507Content-Type: image/svg+xmlx-goog-hash: crc32c=vgUlyw==x-goog-hash: md5=vGHctDGhTFCAde7/T3RSOg==x-goog-storage-class: STANDARDServer: UploadServerContent-Encoding: gzipAccept-Ranges: bytesDate: Fri, 26 Apr 2024 04:10:51 GMTVia: 1.1 varnishAge: 166000X-Served-By: cache-pdk-kfty2130020-PDKX-Cache: HITX-Cache-Hits: 1103X-Timer: S1714104652.704805,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: *alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 57 4d 6f 1b 37 10 bd e7 57 6c b7 97 04 90 28 72 86 c3 e1 04 96 03 44 40 7b 71 80 02 69 2f b9 39 d6 46 12 62 4b 86 ac c6 ce bf ef e3 4a 86 c9 54 f6 25 bb 6f 47 f3 f1 e6 cd 90 b9 f8 f0 74 77 db fd 18 f6 0f 9b dd 76 de 07 e7 fb 6e d8 de ec 96 9b ed 6a de ff f3 f7 1f d3 dc 7f b8 7c 73 f1 f0 63 d5 3d 6e 96 87 35 6c 3c df 3f f5 dd 7a d8 ac d6 87 79 cf a1 bc fd d8 0c 8f 1f 77 4f f3 de 77 be 83 45 c7 a1 af dd e2 0d 81 b6 0f f3 7e 7d 38 dc bf 9f cd 1e 1f 1f dd 23 bb dd 7e 35 23 ef fd 0c 01 4e 26 ef 9f 6e 37 db ef e7 0c 83 99 cd c6 af fd e5 9b 0e 7f 17 bf 4d a7 dd 9f c3 76 d8 5f 1f 76 fb f7 dd e7 ef c3 e1 66 dd 09 b9 d0 bd 4d ea 63 7e d7 4d bb ca d1 d7 dd 7a b8 db 5c 9f 0a 74 37 bb bb d9 c3 f1 37 d3 e9 c9 e5 61 73 b8 1d 2e af 76 ab dd e1 e7 fd d0 45 7f ff d4 2d 76 f7 3f 2f 66 c7 2f 47 ab e5 f0 70 73 b9 d8 0f d7 87 61 09 Data Ascii: uWMo7Wl(rD@{qi/9FbKJT%oGtwvnj\|sc=n5l<?zywOwE~}8#~5#N&n7Mv_vfMc~Mz\t77as.vE-v?/f/Gpsa
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: keep-aliveContent-Length: 1488X-GUploader-UploadID: ABPtcPrZvm6VLwtsUOSQMA8nbynKNceOpLp0vg5AByS6nH1QO7mlGooqLkPAq2pmDTB2Qg-8R-c9LHqTwwCache-Control: public, max-age=86400, s-maxage=259200Expires: Sat, 27 Apr 2024 06:04:10 GMTLast-Modified: Wed, 10 Oct 2018 21:37:00 GMTETag: "bc61dcb431a14c508075eeff4f74523a"x-goog-generation: 1539207420450301x-goog-metageneration: 3x-goog-stored-content-encoding: identityx-goog-stored-content-length: 3507Content-Type: image/svg+xmlx-goog-hash: crc32c=vgUlyw==x-goog-hash: md5=vGHctDGhTFCAde7/T3RSOg==x-goog-storage-class: STANDARDServer: UploadServerContent-Encoding: gzipAccept-Ranges: bytesDate: Fri, 26 Apr 2024 04:10:52 GMTVia: 1.1 varnishAge: 166001X-Served-By: cache-pdk-kfty2130025-PDKX-Cache: HITX-Cache-Hits: 1111X-Timer: S1714104652.415578,VS0,VE0Vary: Accept-EncodingAccess-Control-Allow-Origin: *alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 57 4d 6f 1b 37 10 bd e7 57 6c b7 97 04 90 28 72 86 c3 e1 04 96 03 44 40 7b 71 80 02 69 2f b9 39 d6 46 12 62 4b 86 ac c6 ce bf ef e3 4a 86 c9 54 f6 25 bb 6f 47 f3 f1 e6 cd 90 b9 f8 f0 74 77 db fd 18 f6 0f 9b dd 76 de 07 e7 fb 6e d8 de ec 96 9b ed 6a de ff f3 f7 1f d3 dc 7f b8 7c 73 f1 f0 63 d5 3d 6e 96 87 35 6c 3c df 3f f5 dd 7a d8 ac d6 87 79 cf a1 bc fd d8 0c 8f 1f 77 4f f3 de 77 be 83 45 c7 a1 af dd e2 0d 81 b6 0f f3 7e 7d 38 dc bf 9f cd 1e 1f 1f dd 23 bb dd 7e 35 23 ef fd 0c 01 4e 26 ef 9f 6e 37 db ef e7 0c 83 99 cd c6 af fd e5 9b 0e 7f 17 bf 4d a7 dd 9f c3 76 d8 5f 1f 76 fb f7 dd e7 ef c3 e1 66 dd 09 b9 d0 bd 4d ea 63 7e d7 4d bb ca d1 d7 dd 7a b8 db 5c 9f 0a 74 37 bb bb d9 c3 f1 37 d3 e9 c9 e5 61 73 b8 1d 2e af 76 ab dd e1 e7 fd d0 45 7f ff d4 2d 76 f7 3f 2f 66 c7 2f 47 ab e5 f0 70 73 b9 d8 0f d7 87 61 09 Data Ascii: uWMo7Wl(rD@{qi/9FbKJT%oGtwvnj\|sc=n5l<?zywOwE~}8#~5#N&n7Mv_vfMc~Mz\t77as.vE-v?/f/Gpsa
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:10:59 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:10:59 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"acb3af88f9abe902c644d8275113b06b-gzip"Content-Encoding: gzipX-Host: grn80.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 8007Keep-Alive: timeout=10, max=8Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d fd 77 db 38 8e 3f 27 ef dd ff c0 d1 ec 56 ce d4 df 1f 71 62 c7 e9 a6 49 da c9 be b6 c9 26 e9 f4 e6 b5 3d 3f 5a a2 6d 35 b2 a4 8a 52 52 6f ea ff fd 00 92 fa b2 a5 c4 99 74 f6 f6 ee 32 bb b5 2d 12 04 41 10 00 01 8a 44 f6 7e 3a 3a 3d bc fc fd ec 98 4c 83 99 bd bf b9 87 5f c4 a6 ce 64 a0 31 47 db df dc d8 9b 32 6a c2 f7 c6 5e 60 05 36 db 7f e9 5b 7c 44 1d 46 ce a8 e5 90 73 36 a5 23 cb b6 02 1a 58 ae 43 2e 98 7f 6d 19 8c 54 c8 3a 60 7b 35 89 72 6f c6 02 4a 3c df f5 98 1f cc 07 9a 3b e9 71 2b 60 43 87 ce 98 46 0c d7 09 98 13 0c b4 75 50 6a a4 06 83 58 c5 27 3a fa 41 b8 4c c6 0d df f2 10 f4 81 18 cb e4 70 ea bb 8e 65 48 a0 b7 d4 a1 13 36 83 e6 65 f2 36 b4 03 cb b4 b8 61 79 b6 e5 50 7f be 0c 42 ce 7c 77 e2 d3 59 11 55 d6 0c 00 53 f4 4c 83 c0 eb d5 6a 37 37 37 55 0f 30 f9 19 82 aa 86 3b ab d2 b0 16 7a b6 4b 4d 5e 6b d4 ea b5 56 6d bb d6 a8 b7 b6 5b 8d 9d 4e 6d a7 51 df dd 69 b5 aa 5f bc c9 8b 66 a7 fe af e9 74 e4 f9 bc 62 bb 13 17 bb 2d ea 32 f4 ed 87 76 28 50 29 5c 28 53 03 ed df 66 0a 25 39 57 6c 7e e3 fa 26 4f d1 82 a3 29 13 43 f5 25 9f 46 11 7d f8 88 5c 41 64 65 f9 34 4b 11 22 b8 b0 5a 12 8f 45 35 11 85 65 02 3d 5f 19 ee 35 f3 b3 68 53 44 22 93 2b ec 6b 68 5d 0f b4 43 49 60 e5 72 ee a5 27 3e 60 df 82 1a da 8e 3e d0 4c 7d ce 82 41 18 8c 2b 3b da d2 48 af 2d 76 e3 b9 7e 90 6a 7a 63 99 c1 74 60 32 e4 6e 45 3c 94 89 e5 58 81 45 ed 0a 37 a8 cd 06 8d 6a bd 3c 83 a2 19 94 84 16 18 25 b0 46 68 90 80 cb 57 c4 32 01 05 9a 8b ca 88 72 56 e1 c1 1c 15 dd 67 f6 40 13 bf f9 94 31 e8 2e 00 7a 15 99 06 07 46 4f 7d 36 1e 68 b5 9a 61 3a cd 2a 33 ad 60 36 47 24 28 32 08 50 c3 07 5e 85 5f 2f 46 a1 65 9b 97 16 50 df d8 6e b7 5b db 8d 9d 76 53 32 47 f4 ff e8 9e 5c db ac 8d a9 63 cc 47 ee 37 d1 e1 9f d3 0d 77 0d e4 a8 05 7c 4f 8d 2b 58 1e d7 0c 9a 52 e8 c9 f0 19 73 ca 20 0c 5f 98 21 d5 e4 c1 a4 8c 2d 80 a8 cd 40 a8 86 02 3a 19 5c b7 db d8 de 85 76 68 94 a3 d9 0b a6 20 ab 15 d1 3e ee 49 20 d2 6b b5 31 c8 0a af 4e 5c 77 62 33 ea 59 3c 1a d4 8b 31 9d 59 f6 7c 70 08 c2 ed f4 da f5 7a b9 0b ff e0 1b 04 dd b6 0c 7c 92 bf 9e f1 70 84 32 69 83 fc 3b 65 f1 59 01 72 75 31 16 3d 19 8b 2e c7 a2 47 63 d1 1f 4e cb 5b ac 67 be 4f 83 88 a0 47 75 be b9 27 00 96 ab f6 37 ab 92 6d cc 16 2a ce d5 a3 e3 06 95 b1 eb 06 cc ef c1 cf 92 2a c5 25 9c f9 31 ec 16 31 ad 6b b0 97 3e 05 4d f7 40 dd 1e 85 cb 7b 64 fb 2a 08 99 19 1a 41 65 64 bb c6 55 f2 28 a4 e3 47 e1 4e 19 fc c7 Data Ascii: =w8?'VqbI&=?Zm5RRot2-AD~::=
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:03 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:03 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"912ba83fe11cff1f94254e0922c24c93-gzip"Content-Encoding: gzipX-Host: blu39.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7097Keep-Alive: timeout=10, max=59Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 38 92 9f ed aa fb 0f 18 cd 5e 28 4f f4 96 65 d9 7a 78 d6 71 3c b3 d9 9a 24 de d8 d9 b9 ad 38 a7 82 48 48 42 4c 91 0c 41 5a d1 3a fa ef d7 0d 80 2f 89 b4 e5 38 73 b7 b7 e5 d9 1d 99 04 1a 8d 46 bf d0 0d 02 98 c1 0f 2f df 9e 5e fe e3 fc 8c cc 82 b9 7d bc 3b c0 3f c4 a6 ce 74 58 62 4e e9 78 77 67 30 63 d4 82 bf 3b 83 80 07 36 3b 3e 19 bb 61 40 de 0b 52 25 2f 7c 2e c6 d4 61 e4 9c 72 87 bc 63 33 3a e6 36 0f 68 c0 5d 87 5c 30 ff 86 9b 6c 50 57 cd 06 73 16 50 e2 f9 ae c7 fc 60 39 2c b9 d3 9e e0 01 1b 39 74 ce 4a c4 74 9d 80 39 c1 b0 b4 0d ca 12 a9 03 a1 9b f8 64 47 29 5c 11 a5 45 f0 16 13 a6 cf 3d 44 9d a6 e0 fc dd 05 f1 a0 43 78 13 84 fa 8c 50 6b ce 83 80 59 24 74 2c e6 93 60 c6 88 89 e5 ee 84 bc f4 c9 25 f5 43 87 8b 19 25 17 33 ea cf 29 a1 8e 25 61 5e 72 9f 99 81 eb 23 1c be 43 df 53 9f ce 2b d8 e8 82 86 36 f9 95 4d 26 cc a9 91 13 db 26 96 8b a0 aa 3f 3f 3b 6a 6f b6 14 dc e4 d4 11 15 b2 98 b9 64 c1 01 7e 0c 64 09 c1 05 92 35 5e 12 17 3a f0 c9 9c 59 dc a4 76 a5 56 ab 15 8d 99 cf e9 34 cd a3 59 10 78 bd 7a 7d b1 58 d4 3c e0 78 b6 eb 9a e9 ce 6b 34 ac 87 9e ed 52 4b d4 9b f5 46 bd 5d 3f a8 37 1b ed 83 76 f3 b0 53 1f 7b be a8 da ee d4 ad 7d f2 a6 45 5d 86 be fd d0 0e 29 4a ae 1a 8a 1a 6a a3 c4 0b ff 28 d4 d8 be ca 3e 87 fc 66 58 3a 55 48 ab 97 4b 2f 3d a6 80 7d 09 ea d8 b2 4f 4c 10 89 60 c1 30 0c 26 d5 c3 52 4c 1f 2a dd b0 74 c3 d9 c2 73 fd 20 d5 74 c1 ad 60 36 b4 18 aa 59 55 be 54 08 77 78 c0 a9 5d 15 c0 5a 36 6c d6 1a 95 39 14 cd a1 24 e4 60 20 60 19 68 1c 36 77 ae 09 b7 00 05 aa 75 75 4c 05 ab 8a 60 89 0a e9 33 7b 58 92 cf 62 c6 18 74 17 00 bd 9a 4c 53 80 7a ce 7c 36 19 96 ea 75 d3 72 5a 35 90 61 30 5f 22 12 e4 06 02 d4 f1 45 d4 e0 e9 e7 71 c8 6d eb 92 03 f5 cd 83 fd fd f6 41 f3 70 bf a5 f8 2e fb 7f 74 4f ae 6d d5 27 d4 31 97 63 f7 8b ec f0 8f e9 46 b8 26 72 94 03 df 53 e3 0a d6 c7 85 fa 4c a1 27 d3 67 cc a9 80 52 7d 02 83 92 d6 fa 60 52 26 1c 20 ea 73 d0 b8 91 84 4e 06 d7 ed 36 0f 8e a0 1d 3a 8f 48 7a 60 4d 73 56 95 ed e3 9e 24 22 a3 5e 9f 80 ae 88 da d4 75 a7 36 a3 1e 17 d1 a0 7e 9e d0 39 b7 97 c3 53 d0 67 a7 b7 df 68 54 ba f0 2f fc 05 dd b6 b9 89 6f ea e9 99 08 c7 a8 93 36 a8 bc 53 91 bf 55 20 d7 90 63 31 92 b1 18 6a 2c 46 34 16 e3 e1 b4 bc c6 7a e6 fb 34 88 08 7a 54 e7 bb 03 09 b0 5e 75 bc 5b 53 6c 63 36 b0 0d 29 52 af 8e 1b 54 27 ae 1b 30 bf 07 8f 65 5d 8a d3 09 f3 63 d8 3d 62 f1 1b 70 05 3e 05 e7 e8 81 b9 3d Data Ascii: =ks8^(Oezxq<$8HHBLAZ:/8sF/^
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:07 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:07 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"5fc43e71baf1b29d0ff668ab19530285-gzip"Content-Encoding: gzipX-Host: grn67.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7644Keep-Alive: timeout=10, max=46Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d ed 72 db 38 92 bf ed aa 7b 07 8c 66 2f 94 67 f4 2d cb b2 25 cb b3 8e e3 99 cd d6 64 e2 8d 9d 9d bb 4a 72 2a 88 84 24 c6 14 c9 10 a4 15 ad a3 77 b9 67 b9 27 bb ee 06 f8 25 51 b6 15 67 f6 3e ca 99 89 24 02 8d ee 46 77 a3 d1 0d 02 c8 f1 77 2f 5e 9f 5d fd fb c5 39 9b 86 33 e7 64 f7 18 bf 98 c3 dd c9 a0 24 dc d2 c9 ee ce f1 54 70 0b be 77 8e 43 3b 74 c4 c9 e9 c8 8b 42 16 4e 05 bb 08 bc 49 c0 67 ac ca 9e 07 b6 1c 71 17 8a b8 ed b2 37 62 ca 47 b6 63 87 3c b4 3d 97 5d 8a e0 c6 36 c5 71 5d b5 3f 9e 89 90 33 3f f0 7c 11 84 8b 41 c9 9b f4 a4 1d 8a a1 cb 67 a2 c4 4c cf 0d 85 1b 0e 4a 0f 41 59 62 75 e0 78 1d 1f 11 ca e0 5a 63 79 53 43 4b 48 33 b0 7d a4 91 69 fe d2 b5 ec 1b db 8a b8 c3 ce bc 99 ef b9 50 da 63 ff f5 9f ec 9c 9b 53 e6 03 4b 50 c0 6c c9 ec 04 d0 59 30 2e a5 80 ff 2d 36 5a 10 e9 1b 1e d8 5e 24 59 28 40 64 33 31 1b 89 40 b2 1a 7b 03 cd dd 89 64 3c 10 2c e4 d7 c2 65 5c b1 3a 12 13 db 75 a1 8e 71 d7 62 02 fe 7a 63 aa f0 b5 d8 43 8f 01 e7 33 3b 04 00 4d 6d 86 8c 00 18 74 d7 f4 66 42 d6 88 c5 5a ad b6 a9 c3 f6 8c 4f b2 92 9a 86 a1 df ab d7 e7 f3 79 cd 07 b9 07 39 b1 d7 00 67 8d 47 f5 c8 77 3c 6e c9 7a b3 de a8 b7 eb 07 f5 66 a3 7d d0 6e 1e 76 ea 23 3f 90 55 c7 9b 78 b5 8f fe 64 13 c9 28 70 b6 25 c8 51 7f 55 e8 7b 55 f7 bd 86 56 4a 04 e0 8f a2 81 88 aa e2 53 64 df 0c 4a 67 0a 7b f5 6a e1 67 3b 17 8a cf 61 1d 5b f6 99 39 e5 81 14 e1 20 0a c7 d5 c3 52 c2 28 da e0 a0 74 63 8b b9 ef 05 61 a6 e9 dc b6 c2 e9 c0 12 68 75 55 7a a8 80 b6 ed d0 e6 4e 55 9a dc 11 83 66 ad 51 99 41 d1 0c 4a 22 1b 06 0e 8c 18 1c 34 8e ed 5e 33 db 02 14 68 e5 d5 11 97 a2 2a c3 05 da 67 20 9c 41 89 7e cb a9 10 40 2e 04 7e 35 9b a6 94 25 36 0d c4 78 50 aa d7 4d cb 6d d5 84 65 87 b3 05 22 41 b1 20 40 1d 1f 64 0d 7e fd 34 8a 6c c7 ba b2 81 fb e6 c1 fe 7e fb a0 79 b8 df 52 0a 20 fa 8f a6 e4 39 56 7d cc 5d 73 31 f2 3e 13 c1 3f 86 8c f4 4c 94 a8 0d 72 cf f4 2b 5c ed d7 0c 9a 72 a0 64 06 42 b8 15 b0 89 8f c2 54 63 76 6b 56 c6 36 40 d4 67 60 7a 43 82 4e 3b d7 ed 36 0f 8e a0 1d fa 92 58 7b 60 82 33 51 a5 f6 09 25 42 64 d4 eb 63 b0 15 59 9b 78 de c4 11 dc b7 65 dc a9 9f c6 7c 66 3b 8b c1 19 18 b6 db db 6f 34 2a 5d f8 0b df 60 e4 8e 6d e2 93 fa f5 4c 46 23 b4 49 07 3d 42 85 3e ab c0 ae 41 7d 31 d2 be 18 aa 2f 46 dc 17 63 7b 5e 5e 61 bd 08 02 1e c6 0c 3d 8a f8 ee 31 01 ac 56 9d ec d6 94 d8 84 23 d0 33 49 fd e8 7a 61 75 ec 79 a1 08 7a f0 b3 ac 4b 71 9a 11 41 02 bb c7 Data Ascii: =r8{f/g-%dJr*$wg'%Qg>$Fww/^
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:09 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:09 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"513981159733d92fcf703fe83af9c181-gzip"Content-Encoding: gzipX-Host: grn86.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 10442Keep-Alive: timeout=10, max=47Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 79 77 db 38 f2 e0 df f6 7b fb 1d d0 ea d9 48 9e d6 2d cb b2 e5 a3 c7 71 ce df 8b 13 77 ec 4c 6f 6f 92 f5 83 48 48 62 4c 91 0c 41 5a d6 b8 fd dd b7 aa 00 f0 90 28 5b ce d1 3d 3d e3 74 5b 12 71 14 0a 85 42 5d 00 81 bd 1f 9e bc 39 3a fb ed e4 29 1b 47 13 f7 60 7d 0f bf 98 cb bd d1 7e 49 78 a5 83 f5 b5 bd b1 e0 36 7c af ed 45 4e e4 8a 83 17 82 bb d1 98 9d 84 fe 50 48 e9 f8 1e 77 25 ab b1 c7 a1 23 07 dc 13 ec 84 3b 1e 7b 2b c6 7c e0 b8 4e c4 23 28 c1 4e 45 78 e9 58 62 af a1 40 ec 4d 44 c4 59 10 fa 81 08 a3 d9 7e c9 1f f5 a5 13 89 73 8f 4f 44 89 59 be 17 09 2f da 2f ad 02 b2 c4 1a 80 f4 22 3c 6a 28 03 ab 08 eb 65 75 6d 21 ad d0 09 b0 99 0c 84 37 71 c8 c6 0a 8a c5 43 81 55 32 04 b0 fc 89 60 91 3f 12 d1 58 84 f0 03 b3 2f 1d 5b b0 99 1f b3 a9 03 95 38 94 95 11 f7 2c c1 a0 37 50 8c 4d b8 c7 47 62 02 d0 99 3f c4 82 21 d6 1a b8 62 52 67 67 63 e1 84 4c 5e 38 2e 00 c7 e6 6c 67 38 14 21 94 ad 62 5b 81 eb 60 3d 1e ce aa 8c 7b 36 d4 87 4c c6 d9 25 0f 1d 11 cd 10 1e 0f 00 18 b7 c6 42 d6 d9 53 f8 ae d7 eb cb 3a ec 4c 00 8f 4c 57 c7 51 14 f4 1b 8d e9 74 5a 0f 80 f4 61 8e f2 75 68 be ce e3 46 1c b8 3e b7 65 a3 d5 68 36 3a 8d ad 46 ab d9 d9 ea b4 b6 bb 8d 20 1e b8 8e 1c 0b bb 61 4b ab d6 6c 6e ed d4 3f 05 a3 9f 5b dd ad 56 07 8a 6c 77 fe 18 34 76 3a 9b ad ee 76 af 1e 78 a3 3f ba df 03 e1 d5 82 b1 1f f9 b5 76 cd 0f 9d 91 ea 3f 74 bf db 86 cf ad 3f 06 1d 37 b6 66 b5 88 cf 5c 3f ac b5 3b bd 2b f8 3b 27 64 fe 04 82 8c 1c 8f d7 46 02 98 d4 cb 10 a4 db 6c 6f 6d 6f 77 bb db 7f 0c 3a c2 76 22 3f 6c 4c c5 00 85 8d 1e 20 98 66 b6 53 93 3c f6 6c 11 ca f3 96 c2 6c 73 a7 d5 da d9 ea 35 9b 7f 0c 66 92 5f 42 d1 3f 6d 74 02 3f 8c 42 ee 44 35 3b 04 81 06 14 10 44 82 ad 56 7b 67 fb 8f e2 d6 e0 ca ad b5 9b ed 56 73 a7 d5 04 76 6d 83 d8 e8 b6 db b5 ee b9 61 97 3f 06 8d 41 10 ca 9a eb 8f fc db 9a 8c 43 f7 be 0d 2a c5 51 cb e9 8c 3a aa 5a 6a 03 fe a9 66 10 56 4d 7c 8e 9d cb fd d2 91 6a a0 76 36 0b b2 fd 8b c4 55 d4 c0 9a bb cc 1a f3 50 8a 68 3f 8e 86 b5 ed 52 82 2b 6a d1 fd d2 a5 23 a6 38 b0 99 aa 53 c7 8e c6 fb b6 40 bd 59 a3 87 2a a8 22 27 72 b8 5b 93 16 77 c5 7e ab de ac 4e 20 69 02 29 b1 03 da 1f d4 3e 6a 7e d7 f1 2e 98 63 03 08 9a 3a 03 2e 45 4d 46 33 d4 b0 a1 70 f7 4b f4 1b 78 49 40 73 11 e0 ab d1 b4 24 e8 d8 71 28 86 fb a5 46 c3 b2 bd 76 1d e7 e0 64 86 40 90 32 58 a0 81 0f b2 0e bf 7e 1e c4 8e 6b 9f 81 62 db 6f 6d 6d 6e 76 b6 5a db 9b 6d 35 06 d4 fe Data Ascii: }yw8{H-qwLooHHbLAZ([==t[qB]9:)G
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:17 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:17 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"3e532273ab6cce2e10b6262b4092f91f-gzip"Content-Encoding: gzipX-Host: grn20.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 8957Keep-Alive: timeout=10, max=71Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 77 db b8 92 e0 67 fb 9c fd 0f 68 f5 ed 48 ee 96 a8 b7 65 cb 8f be 7e 25 9d 3b ed 44 37 4a 6e cf 9c 24 a3 03 91 90 c4 98 22 19 82 b4 a3 71 fb 9c f9 be 7f 62 7f cb fe 94 fd 25 5b 55 00 5f 12 65 cb 71 f7 ee dc 39 e9 87 44 01 85 42 a1 5e a8 02 40 f8 f0 bb f3 d7 67 6f ff 6d 70 c1 66 e1 dc 39 de 3e c4 2f e6 70 77 7a 54 12 6e e9 78 7b eb 70 26 b8 05 df 5b 87 a1 1d 3a e2 f8 8d 90 82 07 e6 8c d5 d8 69 60 cb 31 77 05 1b 70 db 65 6f c4 8c 8f 6d c7 0e 79 68 7b 2e 1b 8a e0 da 36 c5 61 5d 35 3b 9c 8b 90 33 3f f0 7c 11 84 8b a3 92 37 ed 4b 3b 14 23 97 cf 45 89 99 9e 1b 0a 37 3c 2a 6d 82 b2 c4 ea 40 e8 2a 3e ea 28 83 2b a6 74 1d bc 25 a4 19 d8 3e a2 ce b4 fa 3f ff f9 3f 59 32 c6 41 e0 4d 03 3e 97 ff fb 7f 31 f8 ef ed cc 96 cc 76 27 5e 30 57 04 c1 7f a7 83 37 43 06 c5 80 f9 da b6 84 c5 b8 64 9c 4d 23 78 66 a1 c7 bc 28 60 41 8c 0d c0 b9 cb 04 c2 b9 a6 a8 8d b9 44 78 1f 9a 72 a8 05 68 1f 07 3d e7 2e 9f 8a 39 10 03 d0 16 61 88 a4 60 de 84 05 de 38 92 21 76 65 0a 29 85 64 40 09 fb 1c 71 60 d0 02 fa 95 51 c0 01 2f 40 1a 86 b1 6e d0 f6 1c 90 67 86 3b 0b 43 bf 5f af df dc dc 18 d8 7b 90 e3 b8 61 7a 73 83 47 f5 c8 77 3c 6e c9 7a b3 de a8 b7 eb bb f5 66 a3 bd db 6e ee 75 eb 63 3f 90 35 c7 9b 7a c6 27 7f ba ae cb 28 70 1e db 61 cc 32 03 d5 91 f0 c2 3f 0a 35 b6 af 89 cf 91 7d 7d 54 3a 53 48 6b 6f 17 7e 76 4c a1 f8 12 d6 b1 e5 01 33 67 3c 90 22 3c 8a c2 49 6d af 94 d0 87 5a 77 54 ba b6 c5 8d ef 05 61 a6 e9 8d 6d 85 b3 23 4b a0 9e d5 e8 47 15 24 6e 87 36 77 6a d2 e4 8e 38 6a 1a 8d ea 1c 8a e6 50 12 d9 60 21 60 1a 68 1d 8e ed 5e 31 db 02 14 a8 d7 24 dc 9a 0c 17 a8 91 81 70 8e 4a f4 2c 67 42 40 77 21 d0 ab c9 34 a5 2c b1 59 20 26 47 a5 7a dd b4 dc 96 21 2c 3b 9c 2f 10 09 72 03 01 ea f8 43 1a f0 f4 f3 38 b2 1d eb ad 0d d4 37 77 3b 9d f6 6e 73 af d3 52 7c a7 fe 9f dc 93 e7 58 f5 09 68 d1 62 ec 7d a1 0e ff 9c 6e a4 67 22 47 6d e0 7b 66 5c e1 f2 b8 e6 d0 94 43 4f 66 20 84 5b 05 a5 fa 24 4c 65 ae 8f 26 65 62 03 44 7d 0e 1a 37 22 e8 74 70 bd 5e 73 77 1f da a1 f7 88 a5 17 ce c0 00 6b d4 3e e9 89 10 95 eb f5 09 e8 8a 34 a6 9e 37 75 04 f7 6d 19 0f ea e7 09 9f db ce e2 e8 0c f4 d9 ed 77 1a 8d 6a 0f fe 87 6f d0 6d c7 36 f1 97 7a 7a 26 a3 31 ea a4 03 2a ef 56 e9 b3 06 e4 96 69 2c e5 74 2c 65 35 96 72 3c 96 f2 e3 69 b9 c4 7a 11 04 3c 8c 09 7a 52 e7 db 87 04 b0 5c 75 bc 6d 28 b6 09 87 fc 96 d4 3f 5d 2f ac 4d 3c 2f 14 41 1f 1e 2b ba 14 e7 13 11 24 b0 3b cc b2 Data Ascii: }kwghHe~%;D7Jn$"qb%[U_eq9DB^
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:21 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:21 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"4f947907db59c7eafc2cc0ee50ac5133-gzip"Content-Encoding: gzipX-Host: blu76.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7548Keep-Alive: timeout=10, max=36Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 38 92 9f ed aa fb 0f 88 66 2f 94 67 24 ea 65 59 b6 1e 9e 75 1c cf 6c b6 f2 f0 44 ce e6 b6 e2 ac 0a 22 21 89 31 45 32 04 69 45 eb a8 ea be df 9f b8 df 72 3f e5 7e c9 75 03 e0 4b 22 6d 39 9e ec ed 5d 79 66 2c 89 40 a3 d1 2f 34 ba 41 00 d3 7f f2 fc cd e9 c5 5f cf cf c8 2c 98 db c7 bb 7d fc 22 36 75 a6 83 12 73 4a c7 bb 3b fd 19 a3 26 7c ef f4 03 2b b0 d9 f1 9b d0 27 e7 d4 0f 1c e6 73 52 25 cf 7c 8b 8f a9 c3 a0 cc 72 c8 5b 36 a3 63 cb b6 02 1a 58 ae 43 86 cc bf b6 0c d6 af c9 a6 fd 39 0b 28 f1 7c d7 63 7e b0 1c 94 dc 69 97 5b 01 1b 39 74 ce 4a c4 70 9d 80 39 c1 a0 b4 0d ca 12 a9 01 b1 9b f8 44 47 29 5c 69 6a 8b da 98 8c 1b be e5 21 fa 54 cb ff fe f7 ff f8 2d 64 cc e1 20 0c 73 83 0a 8f 19 16 b5 2d 1e 70 b2 1d 14 f6 47 03 c6 09 e5 c4 03 82 88 3b 21 f4 bf fe 73 ce 4c cb a0 b6 bd 24 3c f4 90 35 ce 4c 32 b1 80 5e ce 89 01 84 f8 4c 27 17 33 b6 44 92 af 2d 93 11 4a 7c d0 0e c3 f6 5c ca 02 70 5a 80 87 d0 80 cc 98 ed 59 ce 94 2c dd 90 cc a9 43 a7 4c d7 f5 22 be ad 39 d4 a7 38 9e 05 81 d7 ad d5 16 8b 85 ee 81 e4 fd 0c 33 ba e1 ce 75 1a d6 42 cf 76 a9 c9 6b 8d 5a bd d6 aa 1d d4 1a f5 d6 41 ab 71 d8 ae 8d 3d 9f 57 6d 77 ea ea 9f bc 69 51 97 a1 6f df b7 43 37 f4 ab 9e d2 a0 8e d6 29 70 c3 3f 12 3d e2 a8 b2 cf a1 75 3d 28 9d 4a c4 d5 8b a5 97 e6 2b 60 5f 82 1a b6 ec 11 63 46 7d ce 82 41 18 4c aa 87 a5 98 46 34 c0 41 e9 da 62 0b cf f5 83 54 d3 85 65 06 b3 81 c9 50 cc 55 f1 50 21 96 63 05 a0 d5 2a 07 bd b1 41 43 af 57 e6 50 34 87 92 d0 82 01 03 23 05 07 8b 6d 39 57 c4 32 01 05 9a 78 75 4c 39 ab f2 60 89 c6 e9 33 7b 50 12 bf f9 8c 31 e8 2e 00 7a 15 99 06 07 33 9d f9 6c 32 28 d5 6a 86 e9 34 75 30 90 60 be 44 24 28 11 04 a8 e1 03 d7 e1 d7 cf e3 d0 b2 cd 0b d0 fe a0 71 b0 bf df 3a 68 1c ee 37 a5 ec 45 ff 0f ee c9 b5 cd da 84 3a c6 72 ec 7e 11 1d 7e 9f 6e b8 8b e3 a4 6a 81 dc 53 7c 05 eb 7c e1 60 a1 d0 93 e1 c3 88 ab 80 61 7d 62 86 1c b5 f7 26 65 62 01 44 6d 0e 56 37 12 d0 09 73 9d 4e e3 e0 08 da a1 23 89 b4 17 cc d8 9c 55 45 fb b8 27 81 48 ab d5 26 60 2b 5c 9f ba ee d4 66 d4 b3 78 c4 d4 cf 13 3a b7 ec e5 e0 14 6c da e9 ee d7 eb 95 0e fc c1 37 d8 b7 6d 19 f8 24 7f 3d e5 e1 18 6d d2 06 b3 77 2a e2 b3 0a e4 6a 82 17 2d e1 45 93 bc 68 11 2f da fd 69 79 85 f5 cc 07 47 14 11 f4 a0 ce 77 fb 02 60 bd ea 78 57 97 62 63 36 88 0d 29 92 8f 8e 1b 54 27 ae 1b 30 bf 0b 3f cb aa 14 a7 17 e6 c7 b0 7b c4 b4 ae c1 1d f8 74 ea 53 0f 86 db 83 70 79 0f Data Ascii: =ks8f/g$eYulD"!1E2iEr?~uK"m9]yf,@/4A
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:25 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:25 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"db41b0715e2e060da0336f68f13e4703-gzip"Content-Encoding: gzipX-Host: grn144.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 8286Keep-Alive: timeout=10, max=63Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 9f ed 73 ee 7f 40 d9 36 94 1b 51 14 f5 b4 25 cb d9 c4 49 1f 7b 9a c4 1b 27 db bb 27 c9 d5 a1 28 48 62 4c 91 2a 49 59 71 5d fd f7 3b 33 00 f8 90 28 5b b6 93 36 db ba bb 91 49 60 30 33 18 0c 06 33 00 08 1c 7e f5 f4 e5 f1 eb ff 9c 3c 63 93 78 ea 1d ed 1e e2 1f e6 d9 fe b8 a7 71 5f 63 1f a7 9e 1f 75 46 83 9e 36 89 e3 59 c7 34 83 f1 ac 32 e5 a6 1f 99 a3 c1 d7 da d1 ee ce e1 84 db 43 f8 bb 73 18 bb b1 c7 8f 9e 84 6e 34 b0 7d ce 4e 6c d7 67 af f8 c4 1e b8 9e 1b db b1 1b f8 ec 94 87 e7 ae c3 99 c1 9e 78 c1 f8 d0 14 45 0e a7 3c b6 d9 2c 0c 66 3c 8c 2f 7a 5a 30 ee 44 6e cc fb be 3d e5 1a 73 02 3f e6 7e dc d3 b6 c1 ac 31 13 2a b1 8e 8f 08 65 71 01 f9 4d b0 43 1e 39 a1 3b 43 b4 9f 88 ba 3b b5 c7 59 ea 52 96 8b c5 a2 32 03 6c 61 0e 59 c5 09 a6 15 7b 6e ce 67 5e 60 0f 23 d3 32 ab 66 dd 6c 99 56 b5 de aa 5b fb 4d f3 22 18 db c6 cc 0e 63 23 9e 84 9c c3 e3 98 1b b5 ca 87 d9 c6 1a fd 01 f4 ad 3f 99 7e fd 4f a1 bf 08 fe cc da 2b ea 7f 60 db 4f 6d df 1e bb fe d8 c0 b2 c6 c2 8d 27 06 31 34 e5 43 89 42 f0 66 fd e1 72 b9 21 67 5f ae cc fe 40 4d 1e cc c2 c8 00 4b 18 5c 45 72 1e 7a 37 25 38 00 9c 15 1c 49 32 38 b1 a0 c1 7f 9d bb e7 3d dd b1 9d 09 37 10 67 18 78 7a 82 5c f7 03 83 b2 74 2c 06 ff ad 95 d4 8e 05 a8 f1 fa 62 96 15 43 cc 3f c6 26 12 ec 32 67 62 87 11 8f 7b f3 78 64 ec 6b 09 79 1c 4b 7a da b9 cb 17 b3 20 8c 33 45 17 ee 30 9e f4 86 1c ed b7 41 2f 65 e6 fa 6e ec da 9e 11 39 b6 c7 7b 56 a5 5a 9e 42 d2 14 52 e6 2e 8c 79 30 d8 e1 78 e7 b9 fe 19 73 87 80 02 47 2b 63 60 47 dc 88 e2 0b 1c 67 42 ee f5 34 7a 8e 26 9c 03 b9 18 f8 95 6c 3a 51 a4 31 30 5c a3 9e 66 9a ce d0 af 55 50 0f a6 17 88 04 05 88 00 26 be 44 15 78 7a 34 98 bb de f0 b5 0b dc 5b ad 66 bb 5e 6d b7 0f da 42 ac 44 ff ce 94 02 6f 68 8e 6c df b9 18 04 1f 89 a0 d5 6a 34 ea 2d 6b bf 51 fb 94 64 a2 c0 41 89 ba 20 f7 4c bd 62 51 af 94 20 f6 09 1b 28 39 60 d8 fd 32 e8 e1 07 ee 88 81 f8 c6 ac 8c 5c 80 80 ce e7 fa 7d 82 4e 2b d7 6e 5b ad 03 28 87 3e 81 6a bd 78 c2 a7 a0 92 58 3e a1 44 88 74 d3 1c 81 ae 44 95 71 10 8c 3d 6e cf dc 48 55 ea d1 c8 9e ba de 45 ef 18 ba 80 df 69 54 ab e5 36 fc 83 bf d0 1d 3c d7 c1 37 f1 f4 20 9a 0f 50 27 3d e8 25 7e 99 7e 0d 60 57 a7 ba e8 69 5d 74 51 17 5d d5 45 bf 39 2f cf 31 9f 87 a1 1d 2b 86 ee 44 7c f7 90 00 56 b3 8e 76 2b 42 6c dc 03 b1 21 47 e2 d5 0f 62 63 14 04 31 0f 3b f0 58 92 a9 e8 21 f2 30 81 dd 63 43 f7 1c ac 47 68 8f 43 7b 06 Data Ascii: =kw6s@6Q%I{''(HbL*IYq];3([6I`033~<c
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:39 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:39 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"97b722074e49064db4dd4e84d491d0f3-gzip"Content-Encoding: gzipX-Host: grn39.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7605Keep-Alive: timeout=10, max=60Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f e5 f7 f6 3f a0 d9 b3 a1 dc ad 83 d4 7d 58 ea 71 1c a7 27 fd 3a 89 3b 76 b6 77 36 ce ea 41 14 24 31 a6 48 86 87 1d 8d a3 ff be 55 00 78 49 94 2d c7 ce 74 b2 cf 3d 13 8b 04 0a 55 85 42 a1 50 05 82 c5 83 1f 9e bd 3e 3a fb e7 c9 31 99 07 0b 6b b8 77 80 3f c4 a2 f6 6c a0 30 5b 19 ee 15 0e e6 8c 4e e0 b7 70 10 98 81 c5 86 cf 1c 23 70 3c f2 86 4d 99 e7 51 8b 9c d0 19 23 65 f2 d4 33 fd 31 b5 19 dc 9b 36 d4 ce e9 d8 b4 cc 80 06 a6 63 93 53 e6 5d 9a 06 3b a8 0a 14 07 0b 16 50 e2 7a 8e cb bc 60 39 50 9c 59 cf 37 03 36 b2 e9 82 29 c4 70 ec 80 d9 c1 40 d9 05 a5 42 aa c0 f4 26 3e 4e 28 85 2b 8f eb 6d 6d 27 cc 37 3c d3 45 32 29 0c cf a1 f9 84 63 f1 49 e0 90 a9 69 59 c4 b4 4b c4 8b 50 3a 53 e2 02 6f 00 0c e5 00 c1 b9 7e 49 6d a0 b4 c0 c2 13 cf 99 79 74 b1 8d aa b9 e0 2c c5 f4 e6 41 e0 f6 aa d5 ab ab ab 8a 0b 98 bc 4c f7 2b 86 b3 a8 d0 b0 1a ba 96 43 27 7e 55 af 6a d5 7a b5 55 d5 b5 7a ab ae 77 9a d5 b1 eb f9 65 cb 99 39 95 0f ee 6c 1b c9 d0 b3 ee 4a 30 ea ad 5f 41 45 e1 88 25 66 1c bc 81 f2 6f 90 9d a4 87 ec 96 d9 c7 d0 bc 1c 28 47 82 50 f9 6c e9 a6 45 18 b0 4f 41 15 f9 ec 13 63 4e 3d 9f 05 83 30 98 96 3b 4a 2c 0e c1 f4 a5 c9 ae 5c c7 0b 52 4d af cc 49 30 1f 4c 18 ea 58 99 df 94 80 33 33 30 a9 55 f6 0d 6a b1 81 5e d1 4a 0b 28 5a 40 49 68 c2 4c 81 29 82 b3 c4 32 ed 0b 62 4e 00 05 ea 74 79 4c 7d 56 f6 83 25 6a a3 c7 ac 81 c2 af fd 39 63 40 2e 00 7e 25 9b 86 ef 2b 64 0e 02 19 28 d5 aa 31 b1 6b 15 36 31 83 c5 12 91 a0 f0 11 a0 8a 37 7e 05 ae 7e 19 87 a6 35 39 33 81 7b bd d5 68 d4 5b 7a a7 51 13 c3 cc e9 df 9b 92 63 4d aa 53 6a 1b cb b1 f3 89 13 fc 3a 64 7c c7 40 89 9a 20 f7 54 bf 82 f5 7e 2d a0 29 05 4a 86 c7 98 5d 02 1d fe c0 0c a1 62 77 66 05 74 8f f9 d5 05 e8 d7 88 43 27 9d 6b b7 f5 56 17 da a1 e5 88 46 2f 98 83 fe 95 79 fb 98 12 47 a4 56 ab 53 d0 15 bf 32 73 9c 99 c5 a8 6b fa 51 a7 7e 99 d2 85 69 2d 07 47 30 7d ec 5e 43 d3 4a 6d f8 07 bf 30 95 2c d3 c0 3b 71 f5 c4 0f c7 a8 93 16 68 be 5d e2 7f cb c0 ae ca fb a2 26 7d 51 45 5f d4 a8 2f ea dd 79 79 89 f5 38 d5 82 88 a1 7b 11 df 3b e0 00 eb 55 c3 bd 8a 10 1b b3 f8 b4 f5 e5 ad ed 04 e5 a9 e3 04 cc eb c1 65 51 96 e2 ba c2 bc 18 76 9f 4c cc 4b b0 3c 1e 85 99 ee c2 74 bb 17 2e f7 9e ed 2b a0 64 93 d0 08 ca 63 cb 31 2e 92 5b ae 1d 0f 85 3b 65 2c ef 8b 52 94 4f 1d 6f 51 9e 9a cc 9a c0 12 3e 66 d6 d7 c2 fa a3 a8 90 d6 72 7d e0 d6 6a dd 8d 92 5b 84 bb 0d 3a 23 ae 75 a0 1d 59 Data Ascii: =iw8?}Xq':;vw6A$1HUxI-t=UBP>:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 04:11:45 GMTServer: ApacheVary: X-W-SSL,Accept-Encoding,User-AgentSet-Cookie: language=en; expires=Fri, 10-May-2024 04:11:45 GMT; Max-Age=1209600; path=/Cache-Control: privateETag: W/"407df2209518c197453ec3f8cbff2752-gzip"Content-Encoding: gzipX-Host: grn99.sf2p.intern.weebly.netX-UA-Compatible: IE=edge,chrome=1Content-Length: 7673Keep-Alive: timeout=10, max=75Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 9f e5 73 ee 7f 40 d9 6e 28 b7 7a 90 7a 3f 2c 65 1d c7 e9 a6 a7 49 dc 38 d9 de de 38 57 07 a2 20 89 31 45 32 24 65 47 eb e8 bf df 19 00 7c 49 a4 2d c7 ce 6e 72 8f bb 1b 8b 04 06 33 83 c1 60 30 03 82 c3 83 1f 9e be 3a 7a f3 d7 c9 31 99 07 0b 6b b8 77 80 3f c4 a2 f6 6c a0 30 5b 19 ee 15 0e e6 8c 4e e0 b7 70 10 98 81 c5 86 27 34 30 99 1d 90 63 fb e3 d2 f4 56 e4 84 ce 18 29 93 27 9e e9 8f a9 cd e0 de b4 c9 6b 36 a7 63 d3 32 03 00 76 6c 72 ca bc 0b d3 60 07 55 81 e2 60 c1 02 4a 5c cf 71 99 17 ac 06 8a 33 eb f9 66 c0 46 36 5d 30 85 18 8e 1d 00 81 81 b2 0b 4a 85 54 81 e9 6d 7c 9c 50 02 57 16 d7 79 6d 27 cc 37 3c d3 45 32 09 0c cf 1c 8f b8 02 8b 4f 02 87 4c 4d cb 22 a6 5d 22 1e 9b 32 cf a3 16 71 a6 21 00 94 03 04 67 fb 05 b5 81 d4 02 0b 4f 3c 67 e6 d1 45 1e 59 73 c1 79 8a 08 ce 83 c0 ed 55 ab 97 97 97 15 17 30 79 a9 fe 57 0c 67 51 a1 cb ea d2 b5 1c 3a f1 ab 7a 55 ab d6 ab ad aa ae d5 5b 75 bd d3 ac 8e 5d cf 2f 5b ce cc a9 7c 70 67 79 24 97 9e 75 5b 82 1f 97 cc c7 7b 9b 9a 1e ab a0 b6 70 e4 12 3b 8e e0 40 f9 77 08 50 12 44 9e cb 0c c6 f4 62 a0 1c 09 4a e5 37 2b 37 29 c7 80 7d 0a aa c8 68 9f 18 73 ea f9 2c 18 2c 83 69 b9 a3 44 32 11 5c 5f 98 ec d2 75 bc 20 d1 f4 d2 9c 04 f3 c1 84 a1 a6 95 f9 4d 09 38 33 03 93 5a 65 df a0 16 1b e8 15 ad b4 80 a2 05 94 2c 4d 98 2f 30 51 70 ae 58 a6 7d 4e cc 09 a0 40 cd 2e 8f a9 cf ca 7e b0 42 9d f4 98 35 50 f8 b5 3f 67 0c c8 05 c0 af 64 d3 f0 7d 85 cc 41 20 03 a5 5a 35 26 76 ad c2 26 66 b0 58 21 12 1c 01 04 a8 e2 8d 5f 81 ab c7 e3 a5 69 4d de 98 c0 bd de 6a 34 ea 2d bd d3 a8 89 b1 e6 f4 ef 4c c9 b1 26 d5 29 b5 8d d5 d8 f9 c4 09 7e 1d 32 be 63 a0 44 4d 90 7b a2 5f c1 66 bf 16 d0 94 02 25 c3 63 cc 2e 81 22 7f 60 86 d0 b1 5b b3 02 ba c7 fc ea 02 f4 6b c4 a1 e3 ce b5 db 7a ab 0b ed d0 7e 84 a3 17 cc 41 ff ca bc 7d 44 89 23 52 ab d5 29 e8 8a 5f 99 39 ce cc 62 d4 35 fd b0 53 8f a7 74 61 5a ab c1 11 cc 21 bb d7 d0 b4 52 1b fe c1 2f cc 27 cb 34 f0 4e 5c 3d f2 97 63 d4 49 0b 34 df 2e f1 bf 65 60 57 e5 7d 51 e3 be a8 a2 2f 6a d8 17 f5 f6 bc bc c0 7a 9c 6a 41 c8 d0 9d 88 ef 1d 70 80 cd aa e1 5e 45 88 8d 59 7c da fa f2 d6 76 82 f2 d4 71 02 e6 f5 e0 b2 28 4b 71 75 61 5e 04 bb 4f 26 e6 05 98 1f 8f c2 4c 77 61 ba dd 09 97 7b c7 f6 15 50 b2 c9 d2 08 ca 63 cb 31 ce e3 5b ae 1d f7 85 3b 61 2d ef 8a 52 94 4f 1d 6f 51 9e 9a cc 9a c0 42 3e 66 d6 d7 c2 fa a3 a8 90 d6 Data Ascii: =kw6s@n(zz?,eI88W 1E2$eG\|I-nr3`0:z1kw?l0[Np'40

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1Host: www.editmysite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /undefined/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=http%3A%2F%2Fwww.painrehabilitation.com.au HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=412d488183deed30a0ed746ecb78fa41 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.painrehabilitation.com.ausec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings?session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb6089b8481d16d69%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df8f69f638f7349a7a%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfe201db235e547120%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/button.856debeac157d9669cf51e73a08fbc93.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings?session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iEpO4/yy/l/en_US/JEeFeYKiBmD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.facebook.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690136%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690137%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690136%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690137%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iEpO4/yy/l/en_US/JEeFeYKiBmD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yx/l/0,cross/S0jWmsE7Isg.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yz/r/vSgPJr1eTij.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iOSK4/yk/l/en_US/fEweerzOoLdN1tHVL5OZK-DYvatkvPhoO1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ijuz4/yH/l/en_US/14GmiBZnqb0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yV/r/TQ5rYX3IGJd.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3izEF4/yB/l/en_US/hVvQIzanlygfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3itnb4/yJ/l/en_US/E-kDMNoSf3K.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y1/r/K4XTICDgjGx.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i_8K4/yu/l/en_US/RRm2quQ_ymn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ieKI4/yE/l/en_US/-bsZwTn4aTy.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/mM84SfiWlvq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/comet/empty_states_icons/permissions/permissions_gray_wash.svg HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=tsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yy/r/cXapvT5eNtc.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yy/r/cXapvT5eNtc.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/comet/empty_states_icons/permissions/permissions_gray_wash.svg HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=4&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=5&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=6&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1714104698885 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=8&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?_=1714104705011 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/webstorage/process_keys/?state=1 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo; datr=dCkrZmfEO7wCe7gasx04rfhT
Source: global traffic	HTTP traffic detected: GET /signup?utm_source=internal&utm_medium=footer HTTP/1.1Host: www.weebly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/front-door/signup HTTP/1.1Host: www.weebly.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: language=en; _csrf=riwaSi8sHaexD4chGBfQp85GFAhF5Q-Zvlj47R6Vv8E; cookie-consent=%7B%22allowStrictlyNecessaryCookies%22%3Atrue%2C%22allowFunctionalityCookies%22%3Atrue%2C%22allowPerformanceCookies%22%3Atrue%2C%22allowTargetingCookies%22%3Atrue%2C%22allowInternalPerformanceCookies%22%3Atrue%7D; sto-id-editor=GLAMBNAK; __cf_bm=gW7u5TKAfNn7pLiCen75aUgJGlahXIh02XKI3mppONE-1714104709-1.0.1.1-dr0jwwKagxuKOpMKu.7kXrLRnfSpLRknAaA7tXXj5q3IjrFbMJ9IgfljC6DnjPCl_DyiDMtS4_jHtr1c_auxaA
Source: global traffic	HTTP traffic detected: GET /logout?return_to=https://squareup.com/signup?v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%26app%3Dweebly%26return_to%3Dhttps%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup HTTP/1.1Host: squareup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signup?v=weebly-sso&weebly_sso_enabled=true&app=weebly&return_to=https://www.weebly.com/app/front-door/login/square?sso_intent=signup HTTP/1.1Host: squareup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
Source: global traffic	HTTP traffic detected: GET /signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true HTTP/1.1Host: squareup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
Source: global traffic	HTTP traffic detected: GET /square-sans.min.css HTTP/1.1Host: square-fonts-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/vendor.css HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/public-web-styles-proxy.css HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/onboard-frontend-app.css HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/vendor.js HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/onboard-frontend.js HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/public-web-styles.js HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-light.woff2?1713982826 HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mp/status HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Allow-Cookies: no consent datasec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Block-Cookies: trueContent-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: application/json, text/javascript, /; q=0.01X-SPELEO-TRACE-ID: uwyVqdrtzmgzgX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/chunk.122.426e8f84698648d4843b.js HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /martech.js HTTP/1.1Host: martech-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/ecom/weebly_by_square.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/public-web-styles/ui/spinner.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/vector/checkmark.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/public-web-styles/ui/close.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mp/status HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
Source: global traffic	HTTP traffic detected: GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
Source: global traffic	HTTP traffic detected: GET /api/1224658/envelope/?sentry_key=9137ea8d795940958d24a85e9a579e3c&sentry_version=7 HTTP/1.1Host: o160250.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /tracking.json HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/ecom/weebly_by_square.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/vector/checkmark.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/public-web-styles/ui/spinner.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.states.service.StatesService/Fetch HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/images/public-web-styles/ui/close.svg HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1Host: tealium-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0 HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
Source: global traffic	HTTP traffic detected: GET /tracking.json HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpyw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=Signup&v=Visited%20Onboarding&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047148981 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_click&page_click_action=Signup&page_click_description=Visited%20Onboarding&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047148992 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1280%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047149291 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzC
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047149302 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_click&page_click_action=Signup&page_click_description=Visited%20Onboarding&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047148992 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=Signup&v=Visited%20Onboarding&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047148981 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%23%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1263%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047153713 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153724 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/tl HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1280%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047149291 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=w9L.Cp2TOzoZLNBEXDaPazCu7wzYuOPRyZ4ShwOSigg-1714104719-1.0.1.1-iJleCmxsB1DeanuFPaH6TCwUB6J9Gli7i_wF.9NY6gtUazwwTlOtzgNY4seK.fxXkWT_zdKZGHoX7Ts1zMfFTg
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831 HTTP/1.1Host: api.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55f
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047149302 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=w9L.Cp2TOzoZLNBEXDaPazCu7wzYuOPRyZ4ShwOSigg-1714104719-1.0.1.1-iJleCmxsB1DeanuFPaH6TCwUB6J9Gli7i_wF.9NY6gtUazwwTlOtzgNY4seK.fxXkWT_zdKZGHoX7Ts1zMfFTg
Source: global traffic	HTTP traffic detected: GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%23%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1263%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047153713 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=ZfeF7elDI7AtREcy_tLPM6c.dRi6mCh8msy6CGKlc4c-1714104719-1.0.1.1-XGxWSXHWu4co85iGarMayKU.66Gb0.tqbMl2Jp3gJNlNBjsvCdWGRHCrpd1p2tNMpqbaPAbHofUdEvadtTSiuw
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153724 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=ZfeF7elDI7AtREcy_tLPM6c.dRi6mCh8msy6CGKlc4c-1714104719-1.0.1.1-XGxWSXHWu4co85iGarMayKU.66Gb0.tqbMl2Jp3gJNlNBjsvCdWGRHCrpd1p2tNMpqbaPAbHofUdEvadtTSiuw
Source: global traffic	HTTP traffic detected: GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-medium.woff2?1713982826 HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831 HTTP/1.1Host: api.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _ga=GA1.2.171990837.1714104719; _gid=GA1.2.775248889.1714104719; _gat=1; __cf_bm=E_yd7_L3ha0nXbIoOq_9i1UP6B8rY8B_0KY9RH
Source: global traffic	HTTP traffic detected: GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpywAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-bold.woff2?1713982826 HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpywAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-regular.woff2?1713982826 HTTP/1.1Host: onboardfrontend-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/sqmarket/sqmarket-light.woff2 HTTP/1.1Host: d1g145x70srn7h.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://onboardfrontend-production-c.squarecdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quant.js HTTP/1.1Host: secure.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/438838e0-2800-4410-b44b-37a1d246db65/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /send-post-request.js HTTP/1.1Host: martech-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat/amzn.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shim.js?id=mVfPI-96JuPi HTTP/1.1Host: cdn.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /roi/cnxtag-min.js?id=310748 HTTP/1.1Host: js.cnnx.linkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&uid=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&gjid=998327875&_gid=775248889.1714104719&_u=YEBAAEAAAAAAACAAI~&z=1941767255 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/uVe7f6hL1p6P5l8A7l89?page_url=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: 12345.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/otCenterRounded.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/438838e0-2800-4410-b44b-37a1d246db65/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/984344943?random=1714104722646&cv=11&fst=1714104722646&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/984344943?random=1714104722660&cv=11&fst=1714104722660&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/984344943?random=1714104722664&cv=11&fst=1714104722664&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/984344943?random=1714104722667&cv=11&fst=1714104722667&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: 12345.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/746791505?random=1714104722850&cv=11&fst=1714104722850&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/746791505?random=1714104722873&cv=11&fst=1714104722873&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/otCenterRounded.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&_u=YEBAAEAAAAAAACAAI~&z=677992896 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /signals/config/816297701715444?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /14e503e7ed5f221c.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984344943/?random=1714104722646&cv=11&fst=1714104722646&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984344943/?random=1714104722660&cv=11&fst=1714104722660&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202301.2.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ\|t
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984344943/?random=1714104722664&cv=11&fst=1714104722664&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984344943/?random=1714104722667&cv=11&fst=1714104722667&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/746791505/?random=1714104722850&cv=11&fst=1714104722850&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/746791505/?random=1714104722873&cv=11&fst=1714104722873&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9628652.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://9628652.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripts/lt-v4.js?llid=30484 HTTP/1.1Host: lltrck.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f
Source: global traffic	HTTP traffic detected: GET /track/up?adv=lb8beig&ref=https%3A%2F%2Fsquareup.com%2F&upid=wf1vc7l&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/630646945?random=1714104722909&cv=11&fst=1714104722909&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/630646945?random=1714104722926&cv=11&fst=1714104722926&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://12345.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/aa498dad-1691-4c3b-894a-906c990be323/eab8b6ff-57d6-438a-a7e5-c58dd370ce73/000d8b20-8c3d-4f4f-a0da-5b515f8f20d2/Square_combinationmark_black.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9628652.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://9628652.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk9D9i-2ERsBLIZ2ICeEuCebC-Jqu0SLdYXVu1kpPBmQlM7E4cjptph7Rc0POo
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: 9628652.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk9D9i-2ERsBLIZ2ICeEuCebC-Jqu0SLdYXVu1kpPBmQlM7E4cjptph7Rc0POo
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&_u=YEBAAEAAAAAAACAAI~&z=677992896 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722646&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqor69BboVsny_K7DCDXcsyz4GImiUUgS97uFoHG_eJVrfLW4f&random=29142363&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722660&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdR-v88V_KqHuwxP0UiGzWSci1cvOLfugus7Xwy3acNM-1sXz&random=1902299953&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/746791505/?random=1714104722873&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlF2Df7J4mt7VJp6dvMAc88kLzlNfaLzqdLt3qSb8EMAknJ4m&random=3180817349&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_d07onas7e_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source;event-sourceReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDk2Mjg2NTIKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL3NxdWFyZXVwLmNvbSIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiAxNDE1NTQxMjMwMDIwMjU2Mzk3OQpjdGNfY29udmVyc2lvbl9idWNrZXQ6IDcKYXJjaGV0eXBlX2lkOiAxCmFyY2hldHlwZV9pZDogMwphcmNoZXR5cGVfaWQ6IDQKYXJjaGV0eXBlX2lkOiA1CmFyY2hldHlwZV9pZDogNgphcmNoZXR5cGVfaWQ6IDcKYXJjaGV0eXBlX2lkOiA4CmFyY2hldHlwZV9pZDogOQphcmNoZXR5cGVfaWQ6IDEwCmFyY2hldHlwZV9pZDogMTEKYXJjaGV0eXBlX2lkOiAxMgphcmNoZXR5cGVfaWQ6IDEzCmFyY2hldHlwZV9pZDogMTQKYXJjaGV0eXBlX2lkOiAxNQphcmNoZXR5cGVfaWQ6IDE2CmFyY2hldHlwZV9pZDogMTcKYXJjaGV0eXBlX2lkOiAxOAphcmNoZXR5cGVfaWQ6IDE5CmFyY2hldHlwZV9pZDogMjAKYXJjaGV0eXBlX2lkOiAyMQpjb252ZXJzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBDT05WRVJTSU9OX0RJTUVOU0lPTl9GTE9PRExJR0hUX0FDVElWSVRZX0lECiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAxMjg2NzA2MwogIH0KfQpjb252ZXJzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBDT05WRVJTSU9OX0RJTUVOU0lPTl9DT05WRVJTSU9OX0RBVEUKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgc3RyaW5nX3ZhbHVlOiAiMjAyNC0wNC0yNiIKICB9Cn0KYnJvd3Nlcl9hdHRyaWJ1dGlvbl9hcGlfcmVxdWVzdF9wcm9jZXNzaW5nX2JpdHM6IDU3MDQyNTM0NAp0cmlnZ2VyX2RlZHVwbGljYXRpb25fa2V5OiAyMjQ3MDY4MDU0NzIyNDgyNzg5CmdhaWFfbW9kZTogZmFsc2UKYWdncmVnYXRpb25fY29vcmRpbmF0b3I6IEFHR1JFR0FUSU9OX0NPT1JESU5BVE9SX0FXUwo HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmr1FICvyJ4JojaglZQ3m8OHxzrjf6xzWMVtXIJxn9NtlCbdwlvGTMriibV
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/afac78d381b547529232acd8e168a635/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D HTTP/1.1Host: q.quora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /logos/aa498dad-1691-4c3b-894a-906c990be323/eab8b6ff-57d6-438a-a7e5-c58dd370ce73/000d8b20-8c3d-4f4f-a0da-5b515f8f20d2/Square_combinationmark_black.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/746791505/?random=1714104722850&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMsroGLBUrr_dYF6vBbQdP4TISI0b55MtzAFDFrME9HHtM84D&random=21040603&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722667&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcsW-HAj9e2jhPCNmFcGCDUJCbWNDCgDMdsSRmtkCzhq7W5Ed&random=2669008875&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722664&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2tZl14xvany1orOGKZozu01TEApEZBr9z31RcMZFyD-R4uZT&random=300974641&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722646&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqor69BboVsny_K7DCDXcsyz4GImiUUgS97uFoHG_eJVrfLW4f&random=29142363&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0R6TuMXFH6l0SG0PBHlUa1gdQt9bAlk-k&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_d07onas7e_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDk2Mjg2NTIKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL3NxdWFyZXVwLmNvbSIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiAzNTM4MTkzMTMwNzM2NTkwNzQzCmN0Y19jb252ZXJzaW9uX2J1Y2tldDogNwphcmNoZXR5cGVfaWQ6IDEKYXJjaGV0eXBlX2lkOiAzCmFyY2hldHlwZV9pZDogNAphcmNoZXR5cGVfaWQ6IDUKYXJjaGV0eXBlX2lkOiA2CmFyY2hldHlwZV9pZDogNwphcmNoZXR5cGVfaWQ6IDgKYXJjaGV0eXBlX2lkOiA5CmFyY2hldHlwZV9pZDogMTAKYXJjaGV0eXBlX2lkOiAxMQphcmNoZXR5cGVfaWQ6IDEyCmFyY2hldHlwZV9pZDogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfaWQ6IDE1CmFyY2hldHlwZV9pZDogMTYKYXJjaGV0eXBlX2lkOiAxNwphcmNoZXR5cGVfaWQ6IDE4CmFyY2hldHlwZV9pZDogMTkKYXJjaGV0eXBlX2lkOiAyMAphcmNoZXR5cGVfaWQ6IDIxCmNvbnZlcnNpb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IENPTlZFUlNJT05fRElNRU5TSU9OX0ZMT09ETElHSFRfQUNUSVZJVFlfSUQKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDEyODY3MDYzCiAgfQp9CmNvbnZlcnNpb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IENPTlZFUlNJT05fRElNRU5TSU9OX0NPTlZFUlNJT05fREFURQogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBzdHJpbmdfdmFsdWU6ICIyMDI0LTA0LTI2IgogIH0KfQpicm93c2VyX2F0dHJpYnV0aW9uX2FwaV9yZXF1ZXN0X3Byb2Nlc3NpbmdfYml0czogNTcwNDI1MzQ0CnRyaWdnZXJfZGVkdXBsaWNhdGlvbl9rZXk6IDIyNDcwNjgwNTQ3MjI0ODI3ODkKZ2FpYV9tb2RlOiBmYWxzZQphZ2dyZWdhdGlvbl9jb29yZGluYXRvcjogQUdHUkVHQVRJT05fQ09PUkRJTkFUT1JfQVdTCg HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9628652.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sgtm_tag_monitoring HTTP/1.1Host: us-central1-sq-sgtm-prod.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules-p-e9KDqb0WIZVj6.js HTTP/1.1Host: rules.quantcount.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722660&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdR-v88V_KqHuwxP0UiGzWSci1cvOLfugus7Xwy3acNM-1sXz&random=1902299953&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/746791505/?random=1714104722873&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlF2Df7J4mt7VJp6dvMAc88kLzlNfaLzqdLt3qSb8EMAknJ4m&random=3180817349&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kpi?c=square&tag_id=51&kpi=pageview&user_id=undefined&fpc=f4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU&gtmcb=1573584185 HTTP/1.1Host: pixel.pointmediatracker.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rs?id=9ba0d2d829a94f35b0e9e9c67ed6b26d&t=marketing&tx=undefined&sku=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&dpo=true HTTP/1.1Host: tags.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=lead&content_id=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&receipt_id=undefined&pixid=0ba6452e-34bf-4a66-9ed7-f0e47bc6efcf HTTP/1.1Host: arttrk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=null&page=https%3A%2F%2Fsquareup.com%2F&page_title=3rd%20Party%20iFrame HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=Ol9awdW4ahQmzNbLrAFE-7NRP7cUMtR9tQlZyzvQPWaVTJnfA91yAg==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722667&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcsW-HAj9e2jhPCNmFcGCDUJCbWNDCgDMdsSRmtkCzhq7W5Ed&random=2669008875&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/746791505/?random=1714104722850&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMsroGLBUrr_dYF6vBbQdP4TISI0b55MtzAFDFrME9HHtM84D&random=21040603&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2KVvNhOqnKjbXDo26MACl06dGiNlFc8eU&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984344943/?random=1714104722664&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2tZl14xvany1orOGKZozu01TEApEZBr9z31RcMZFyD-R4uZT&random=300974641&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/ad/afac78d381b547529232acd8e168a635/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D HTTP/1.1Host: q.quora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /rs?sccid=262b6016-3a78-724b-fa35-92c6f2253286&scc=1&id=9ba0d2d829a94f35b0e9e9c67ed6b26d&t=marketing&tx=undefined&sku=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&dpo=true HTTP/1.1Host: tags.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=4QSHbis61S0cWq2
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqnTai8cbbIGHn1RTzxrTaOIdqaeiLMrn2i65F7BQ1i9vx5hex&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2tvBydNcdy15ctYMSy5JKq9783bNd2a2g&random=2767239044 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=tvinWDcLL7EaF4oMBufrAJz3XvkgVvWTQy2rGfW48EosPI54K6LnxZAxuSlFNvmn7MVIoyGkmxRP_oYcCsZaDHB6O19_Hg1kJOBTvLdLv8o.; receive-cookie-deprecation=1; uuid2=3353354537123624800
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1543392/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; CMPS=2712; CMPRO=2712
Source: global traffic	HTTP traffic detected: GET /pixel/?ad_log=referer&action=lead&content_id=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&receipt_id=undefined&pixid=0ba6452e-34bf-4a66-9ed7-f0e47bc6efcf HTTP/1.1Host: arttrk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=Ol9awdW4ahQmzNbLrAFE-7NRP7cUMtR9tQlZyzvQPWaVTJnfA91yAg==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/2179726272122089?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C150%2C179%2C181%2C113%2C135%2C145%2C208%2C209%2C207%2C128%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v&is_vtc=1&cid=CAQSKQB7FLtq5dJpAQlbeMY6o1GZKsmcOgOvVB9QtQO6R7G7s6ijL9vXsCDe&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC34fJ7d9hWwFO-dWS57LcqsEnN6RwgNJfI&random=2194597562 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=9675309&google_hm=NFFTSGJpczYxUzBjV3Ey&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=f2e1131f799e4971ba327a396cf242d9; tv_UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqnTai8cbbIGHn1RTzxrTaOIdqaeiLMrn2i65F7BQ1i9vx5hex&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2tvBydNcdy15ctYMSy5JKq9783bNd2a2g&random=2767239044 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; XANDR_PANID=V2LPUjWmm5E_4-n14U0gcyX-AzD1vNcrS4c8P4bp-lYbKvw8x5vJNqM_D4oTEWbeIoVsnKODN0NYI24gQoHxUyBvHLSB8r5r9VqMsgkbc5k.; uuid2=3785399365866252566
Source: global traffic	HTTP traffic detected: GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685 HTTP/1.1Host: cnv.event.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=a&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3353354537123624800&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
Source: global traffic	HTTP traffic detected: GET /send-post-request.js HTTP/1.1Host: martech-production-c.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIiKSYoKLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.1b7f3d0e.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; CMPS=2712; CMPRO=2712
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=d2e31339-e1c8-4191-ae73-d23f07876d13
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1 HTTP/1.1Host: cnv.event.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171410472808939304; guest_id_ads=v1%3A171410472808939304; personalization_id="v1_g/Gu1QpVB7eqVZ+dRH+pxQ=="; guest_id=v1%3A171410472808939304
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v&is_vtc=1&cid=CAQSKQB7FLtq5dJpAQlbeMY6o1GZKsmcOgOvVB9QtQO6R7G7s6ijL9vXsCDe&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC34fJ7d9hWwFO-dWS57LcqsEnN6RwgNJfI&random=2194597562 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1 HTTP/1.1Host: tags.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=4QSHbis61S0cWq2; matchgoogle=2
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3785399365866252566&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsI-o3Dp6Ls8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSACKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714104727884&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104727887&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727888 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727889 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1 HTTP/1.1Host: cnv.event.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAEiuE7MVlMACFblqXz3dA; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1 HTTP/1.1Host: tags.w55c.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=4QSHbis61S0cWq2; matchgoogle=2
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104728869&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UVTFOemd6WXpVdE4yRTRNeTAwTkdVM0xUbGpaREl0WldZNE16Tm1Zak16T1dJeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714104727884&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727889 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104727887&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727888 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /1543392/trc/3/json?tim=1714104727172&data=%7B%22id%22%3A579%2C%22ii%22%3A%22%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1714104727158%2C%22cv%22%3A%2220240421-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquareup-sccnx%3Aabp%3D1%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22item-url%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22tim%22%3A1714104727170%2C%22ref%22%3Anull%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent:
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel;r=1141592506;event=refresh;labels=_fp.event.Signup%20Page;source=gtm;rf=0;a=p-e9KDqb0WIZVj6;url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D;ref=https%3A%2F%2Fsquareup.com%2F;uht=2;fpan=1;fpa=P0-874124799-1714104721699;pbc=;ns=1;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;d=tealium-f.squarecdn.com;dst=1;et=1714104726103;tzo=-120;ogl=;ses=ed25adab-da7d-47b1-8a18-03121b9b6bf6;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104728869&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UVTFOemd6WXpVdE4yRTRNeTAwTkdVM0xUbGpaREl0WldZNE16Tm1Zak16T1dJeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzVFJ4TWxOcWtWam1pK3QyNGlzSnVzQWhzVThJbnlWdE9hdVFmT2MxeVpNZ3JyYW1obWZSdmpVWnFWeElFMTJuczJ2NTVkWncxZnJEdmh3aEFXRUViV0E0b2wxZjl6V0xkVjZaamNGL3duYz0mT2JHcWIrM1MxbnNHU2FyQUJ1djlCejZkdi84PQ=="
Source: global traffic	HTTP traffic detected: GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CI6tHBoNCJrTrLEGEgUI6AcQAEIASgA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=wpwJZQS8Ay7KBqaQmhYyx4naJ/fdnL8tVigXB3pZZ5Y=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=b&__rev=1013068429&__s=%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /1543392/log/3/unip?en=page_view&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tim=1714104727170&ref=null&cv=20240421-4-RELEASE&tos=2138&ssd=1&scd=0&ler=other&mrir=to&vi=1714104727158&psb=true HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /pixel;r=1141592506;event=refresh;labels=_fp.event.Signup%20Page;source=gtm;rf=0;a=p-e9KDqb0WIZVj6;url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D;ref=https%3A%2F%2Fsquareup.com%2F;uht=2;fpan=1;fpa=P0-874124799-1714104721699;pbc=;ns=1;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;d=tealium-f.squarecdn.com;dst=1;et=1714104726103;tzo=-120;ogl=;ses=ed25adab-da7d-47b1-8a18-03121b9b6bf6;mdl= HTTP/1.1Host: pixel.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=662b299a-c4b48-18b59-7267a
Source: global traffic	HTTP traffic detected: GET /sgtm_tag_monitoring HTTP/1.1Host: us-central1-sq-sgtm-prod.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /1543392/log/3/unip?en=pre_d_eng_tb&tos=2142&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1714104729305&mrir=to&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1d7ba62e-f45b-48b1-a4b3-b753132c722f; tuuid_lu=1714104726\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ3UnZpRVZtM2tKRnoxWE40UmRVYnVTRk50QjN5dVBya1dKZEt0T1phMkZGa2lOdWY4WTRtQ1RFNFdFZ2xyZnAyWkxyQ1ZrZVRSOGV3dW52Nm9uVVQ2UnZ6bmVUbEQ2cWFBK2dGMFdpVXJwVT0memFnNU5Pc1pvQmdSWG43am9XOE5IRk9OUHcwPQ=="
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26
Source: global traffic	HTTP traffic detected: GET /sgtm_tag_monitoring HTTP/1.1Host: us-central1-sq-sgtm-prod.cloudfunctions.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1d7ba62e-f45b-48b1-a4b3-b753132c722f; tuuid_lu=1714104726\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/mVfPI-96JuPi/config HTTP/1.1Host: api.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ul-visitor-id: 3ad56939-5bf1-4785-b4cc-e18f8e86ab2esec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-ul-installation-method: web-gtmx-ul-sdk-version: 2.27.0x-ul-environment-id: mVfPI-96JuPiuserleap-platform: websec-ch-ua-platform: "Windows"Accept: /Origin: https://squareup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/batch HTTP/1.1Host: data-platform.squarecloudservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/mVfPI-96JuPi/config HTTP/1.1Host: api.sprig.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /1543392/log/3/unip?en=pre_d_eng_tb&tos=6147&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1714104733314&mrir=tto&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tealium-f.squarecdn.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3adeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1Host: capi.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
Source: global traffic	HTTP traffic detected: GET /contact.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /css/sites.css?buildTime=1644361842 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/old/fancybox.css?1644361842 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/social-icons.css?buildtime=1644361842 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1644361842& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1644361842 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/bprs-logo.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/5533639.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/5939774.jpg?250 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/footerSignup.js?buildTime=1713980951 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js?1530561231 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/custom.js?1530561231 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /files/theme/mobile.js?1530561231 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1644361842 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/wSocial/wsocial.woff?ts=1713474201933 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveOrigin: http://www.painrehabilitation.com.auUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://cdn2.editmysite.com/css/social-icons.css?buildtime=1644361842Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/1797786785.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/575468987.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/bprs-logo.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/5533639.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/5939774.jpg?250 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /weebly/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1Host: www.weebly.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1Host: www.editmysite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/wsnbn/snowday262.js HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/free-footer-v3.css?buildtime=1713980951 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/575468987.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/SQ_Market/sqmarket-medium.woff2 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveOrigin: http://www.painrehabilitation.com.auUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/1797786785.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/contact.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/8109833.jpg?250 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/360879484.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/images/scroll.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/8109833.jpg?250 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /files/theme/images/scroll.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/360879484.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about-us.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/about-us.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/359933816.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/about-us.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/359933816.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Source: global traffic	HTTP traffic detected: GET /about-the-program.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/about-the-program.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/1922450623.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/about-the-program.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/1922450623.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /health-professionals.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/dsc-0069.jpg?1561336383 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/9341587.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/ben-photo-2-orig.jpg?1613521616 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/974213796.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/lucy-taylor-237x237_orig.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/editor/website-photo-heidi-saunders_1.jpg?1491196700 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/savita_orig.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/health-professionals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/dsc-0069.jpg?1561336383 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/ben-photo-2-orig.jpg?1613521616 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/lucy-taylor-237x237_orig.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/9341587.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/editor/website-photo-heidi-saunders_1.jpg?1491196700 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/974213796.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/savita_orig.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /research.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/research.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/869984522.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/research.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/background-images/869984522.png HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Source: global traffic	HTTP traffic detected: GET /our-partners.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/our-partners.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /blog.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /blog HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /css/sites.css?buildTime=1657307797 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lang/en/stl.js?buildTime=1657307797& HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main.js?buildTime=1657307797 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-3.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/plugins.js HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/custom.js HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/mobile.js HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/old/bg_feed.gif HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/site/main-customer-accounts-site.js?buildTime=1657307797 HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /files/theme/images/calendar.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /images/old/bg_feed.gif HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/theme/images/comments.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-two-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-two-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/images/calendar.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-3.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /files/theme/images/comments.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-3.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/blogAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-two-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-two-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /images/landing-pages/global/logotype.svg HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "bc61dcb431a14c508075eeff4f74523a"If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-2.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /undefined/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets.js HTTP/1.1Host: platform.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1Host: ec.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-3.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Source: global traffic	HTTP traffic detected: GET /referrals.html HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/main_style.css?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.painrehabilitation.com.au/referrals.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.painrehabilitation.com.au/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Source: global traffic	HTTP traffic detected: GET /files/theme/images/header.jpg?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Source: global traffic	HTTP traffic detected: GET /files/theme/images/checkbox.png?1644377169 HTTP/1.1Host: www.painrehabilitation.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1Host: cdn2.editmysite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71"If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT

Source: chromecache_469.2.dr, chromecache_640.2.dr, chromecache_349.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_469.2.dr, chromecache_640.2.dr, chromecache_349.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr, chromecache_364.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr, chromecache_640.2.dr, chromecache_349.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr, chromecache_640.2.dr, chromecache_349.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr, chromecache_364.2.dr, chromecache_526.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_496.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_321.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_609.2.dr	String found in binary or memory: __d("Chromedome",["fbt","gkx"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var d=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]);if(window.chrome\|\|window.safari\|\|c("gkx")("2133")){var e="font-family:helvetica; font-size:20px; ";[[b,e+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,e],[d,e],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}else{b=[""," .d8888b. 888 888","d88P Y88b 888 888","Y88b. 888 888",' "Y888b. 888888 .d88b. 88888b. 888',' "Y88b. 888 d88""88b 888 "88b 888',' "888 888 888 888 888 888 Y8P',"Y88b d88P Y88b. Y88..88P 888 d88P",' "Y8888P" "Y888 "Y88P" 88888P" 888'," 888"," 888"," 888"];e=(""+a.toString()).match(/.{35}.+?\s+\|.+$/g);if(e!=null){a=Math.floor(Math.max(0,(b.length-e.length)/2));for(var f=0;f<b.length\|\|f<e.length;f++){var g=b[f];b[f]=g+new Array(45-g.length).join(" ")+(e[f-a]\|\|"")}}console.log("\n\n\n"+b.join("\n")+"\n\n"+d.toString()+"\n");return}}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_552.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_526.2.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_566.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_321.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=iA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},lA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_321.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: var NB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var h=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)
Source: chromecache_526.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1013068429","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.painrehabilitation.com.au
Source: global traffic	DNS traffic detected: DNS query: cdn2.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.weebly.com
Source: global traffic	DNS traffic detected: DNS query: www.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: ec.editmysite.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: squareup.com
Source: global traffic	DNS traffic detected: DNS query: square-fonts-production-f.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: onboardfrontend-production-c.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: o160250.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: martech-production-c.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn-pci.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: api.neuro-id.com
Source: global traffic	DNS traffic detected: DNS query: data-platform.squarecloudservices.com
Source: global traffic	DNS traffic detected: DNS query: a8447815042.cdn-pci.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: tealium-f.squarecdn.com
Source: global traffic	DNS traffic detected: DNS query: api.squareup.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: rum.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d1g145x70srn7h.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: a.quora.com
Source: global traffic	DNS traffic detected: DNS query: secure.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: 9628652.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.sprig.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: js.cnnx.link
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: 12345.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bttrack.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: us-central1-sq-sgtm-prod.cloudfunctions.net
Source: global traffic	DNS traffic detected: DNS query: lltrck.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: q.quora.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pixel.pointmediatracker.com
Source: global traffic	DNS traffic detected: DNS query: arttrk.com
Source: global traffic	DNS traffic detected: DNS query: 424-iab-218.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: tags.w55c.net
Source: global traffic	DNS traffic detected: DNS query: rules.quantcount.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: capi.squareup.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: cnv.event.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com

Source: unknown

HTTP traffic detected: POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2890 HTTP/1.1Host: www.facebook.comConnection: keep-aliveContent-Length: 134sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280Content-Type: application/x-www-form-urlencodedsec-ch-ua-platform-version: "10.0.0"dpr: 1sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.facebook.comSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=tsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0; expires=Thu, 25-Jul-2024 04:11:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo; expires=Thu, 25-Jul-2024 04:11:37 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0; expires=Thu, 25-Jul-2024 04:11:48 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:11:57 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb533a458df4-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:11:58 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb564d38b3e0-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.states.service.StatesService/Fetchx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:11:58 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb589b1874a0-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:11:59 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb5d58cd0345-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:11:59 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb62ae4ba546-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:11:59 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:12:00 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb678d494c27-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:12:00 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 04:12:01 GMTContent-Type: application/jsonContent-Length: 141Connection: closeCF-Ray: 87a3bb6c4a21a575-MIACF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Origin, Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ctSet-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-download-options: noopenx-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarklyx-frame-options: SAMEORIGINx-permitted-cross-domain-policies: nonex-sq-envoy-safe-auth-decision: NOT_FOUNDx-xss-protection: 1; mode=blockServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:12:01 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:12:03 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Fri, 26 Apr 2024 04:12:04 GMTContent-Type: text/htmlContent-Length: 520Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:12:09 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 1; mode=blockDate: Fri, 26 Apr 2024 04:12:13 GMTContent-Length: 75Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_614.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_387.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_406.2.dr	String found in binary or memory: http://opensource.org/licenses/BSD-2-Clause
Source: chromecache_406.2.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: chromecache_327.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_387.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_643.2.dr	String found in binary or memory: http://www.google-analytics.com
Source: chromecache_317.2.dr	String found in binary or memory: http://www.squareupstaging.com/t/f_online/d_social/p_facebook/c_prospect/o_vid_1x1_9_stu_aptd02_6_24
Source: chromecache_317.2.dr	String found in binary or memory: http://www.squareupstaging.com/t/f_online/d_social/p_google/c_nonbrand/o_vid_1x1_9_stu_aptd02_6_24_6
Source: chromecache_503.2.dr	String found in binary or memory: https://a.quora.com/qevents.js
Source: chromecache_503.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_401.2.dr, chromecache_277.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_351.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_317.2.dr	String found in binary or memory: https://app.optimizely.com/js/innie.js
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Conversion/15905/default?type=img
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2324
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2326
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2661
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2662
Source: chromecache_470.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2665
Source: chromecache_503.2.dr	String found in binary or memory: https://c.amazon-adsystem.com/aat/amzn.js
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_317.2.dr	String found in binary or memory: https://cdn-assets-prod.s3.amazonaws.com/js/preview2/8447815042.js
Source: chromecache_470.2.dr	String found in binary or memory: https://cdn.bttrack.com/js/15905/analytics/1.0/analytics.min.js
Source: chromecache_277.2.dr	String found in binary or memory: https://cdn.sprig.com/shim.js?id=
Source: chromecache_647.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_647.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_638.2.dr, chromecache_495.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDc
Source: chromecache_277.2.dr, chromecache_503.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_484.2.dr, chromecache_547.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_387.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_395.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_632.2.dr, chromecache_477.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_387.2.dr, chromecache_426.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_387.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_387.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_387.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: chromecache_395.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_578.2.dr, chromecache_579.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_561.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62
Source: chromecache_566.2.dr	String found in binary or memory: https://fburl.com/comet_preloading
Source: chromecache_566.2.dr	String found in binary or memory: https://fburl.com/dialog-provider).
Source: chromecache_566.2.dr	String found in binary or memory: https://fburl.com/wiki/m19zmtlh
Source: chromecache_402.2.dr	String found in binary or memory: https://fburl.com/wiki/xrzohrqb
Source: chromecache_353.2.dr, chromecache_342.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_342.2.dr	String found in binary or memory: https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8eb
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_353.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_387.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_503.2.dr	String found in binary or memory: https://google.com
Source: chromecache_503.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_361.2.dr, chromecache_621.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/630646945/?random
Source: chromecache_638.2.dr, chromecache_495.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_526.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_638.2.dr, chromecache_495.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_317.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: chromecache_433.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
Source: chromecache_395.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_426.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/maps_lite/images/2x/control_camera_gray_18dp.png)
Source: chromecache_277.2.dr	String found in binary or memory: https://martech-production-c.squarecdn.com/send-fetch-post-request.js
Source: chromecache_552.2.dr	String found in binary or memory: https://optout.aboutads.info/
Source: chromecache_503.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_561.2.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f
Source: chromecache_561.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=1d7ba62e-f45b-48b1-a4b3-b753132c722f&v
Source: chromecache_638.2.dr, chromecache_495.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bdad84d7-0c54-4f11-9820-187176aaa48f&gd
Source: chromecache_504.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_526.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_503.2.dr	String found in binary or memory: https://q.quora.com/_/ad/
Source: chromecache_614.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_504.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_547.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Source: chromecache_454.2.dr	String found in binary or memory: https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Source: chromecache_503.2.dr	String found in binary or memory: https://secure.quantserve.com/quant.js
Source: chromecache_503.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_519.2.dr, chromecache_489.2.dr	String found in binary or memory: https://squareup.com/gb/en/legal/general/cookie
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/shop/hardware/us/en/products/ipad-pos-stand-credit-card-reader
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/shop/hardware/us/en/products/register-pos
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/shop/hardware/us/en/products/terminal-credit-card-machine
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/signup
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/signup/us?lang_code
Source: chromecache_317.2.dr	String found in binary or memory: https://squareup.com/t/f_online/d_display/p_phdp/c_brand/o_sq_sdk3_android_320x50/l
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/campaign/appointments-online-booking-site-v1
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/campaign/getsquarepossignup
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/campaign/register
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/campaign/take-payments
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/hardware/contactless-chip-reader
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/hardware/register
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/hardware/stand-pos
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/hardware/terminal
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/en/sales/contact?page
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/es/campaign/take-your-next-step
Source: chromecache_491.2.dr	String found in binary or memory: https://squareup.com/us/es/solutions/run-your-business
Source: chromecache_643.2.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: chromecache_643.2.dr	String found in binary or memory: https://ssl.google-analytics.com/j/__utm.gif
Source: chromecache_503.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_321.2.dr, chromecache_374.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_321.2.dr, chromecache_374.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_351.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_643.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_552.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_387.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_504.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_351.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_431.2.dr	String found in binary or memory: https://tinyurl.com/y2uuvskb
Source: chromecache_512.2.dr	String found in binary or memory: https://twitter.com/share
Source: chromecache_277.2.dr	String found in binary or memory: https://us-central1-sq-sgtm-prod.cloudfunctions.net/google_enhanced_conversions
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_351.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_351.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_351.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_643.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences?
Source: chromecache_503.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_351.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_643.2.dr	String found in binary or memory: https://www.google.com/analytics/web/inpage/pub/inpage.js?
Source: chromecache_380.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/746791505/?random
Source: chromecache_476.2.dr, chromecache_345.2.dr, chromecache_359.2.dr, chromecache_515.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/984344943/?random
Source: chromecache_641.2.dr, chromecache_619.2.dr, chromecache_629.2.dr, chromecache_553.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_282.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_503.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_635.2.dr, chromecache_574.2.dr, chromecache_401.2.dr, chromecache_541.2.dr, chromecache_321.2.dr, chromecache_277.2.dr, chromecache_374.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_401.2.dr, chromecache_277.2.dr, chromecache_577.2.dr, chromecache_503.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_351.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_530.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_530.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P72T5M5
Source: chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_480.2.dr, chromecache_282.2.dr, chromecache_619.2.dr, chromecache_553.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_469.2.dr, chromecache_640.2.dr, chromecache_349.2.dr, chromecache_526.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_321.2.dr, chromecache_374.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_324.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_600.2.dr	String found in binary or memory: https://www.quantcast.com/legal/license
Source: chromecache_381.2.dr, chromecache_502.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_552.2.dr	String found in binary or memory: https://www.youronlinechoices.com/
Source: chromecache_321.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_552.2.dr	String found in binary or memory: https://youradchoices.ca/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@41/658@309/97

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,13903977276752297050,1803456697234074248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.painrehabilitation.com.au/contact.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,13903977276752297050,1803456697234074248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.painrehabilitation.com.au/contact.html	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/contact.html	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://s.company-target.com/s/sync?exc=lr	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences?	0%	URL Reputation	safe
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css	0%	Avira URL Cloud	safe
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=7e2f7c8b-e77c-4c6a-ac42-0b01a8ef2ca5&batch_time=1714104730260	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/mobile.js	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/images/calendar.png?1644377169	0%	Avira URL Cloud	safe
https://lltrck.com/scripts/lt-v4.js?llid=30484	0%	Avira URL Cloud	safe
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles.js	0%	Avira URL Cloud	safe
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/chunk.122.426e8f84698648d4843b.js	0%	Avira URL Cloud	safe
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/vendor.js	0%	Avira URL Cloud	safe
https://partners.tremorhub.com/sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f	0%	Avira URL Cloud	safe
https://bttrack.com/Pixel/Conversion/15905/default?type=img	0%	Avira URL Cloud	safe
https://ara.paa-reporting-advertising.amazon/aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/plugins.js	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816	0%	Avira URL Cloud	safe
https://cdn.sprig.com/shim.js?id=mVfPI-96JuPi	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/images/comments.png?1644377169	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/plugins.js?1530561231	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg	0%	Avira URL Cloud	safe
https://us-central1-sq-sgtm-prod.cloudfunctions.net/sgtm_tag_monitoring	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/9341587.png	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?referrer=null&page=https%3A%2F%2Fsquareup.com%2F&page_title=3rd%20Party%20iFrame	0%	Avira URL Cloud	safe
https://bttrack.com/Pixel/Conversion/15905/default?type=img	0%	Virustotal		Browse
http://www.painrehabilitation.com.au/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/1922450623.jpg	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/files/theme/images/scroll.png?1644377169	0%	Avira URL Cloud	safe
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558	0%	Avira URL Cloud	safe
https://us-central1-sq-sgtm-prod.cloudfunctions.net/sgtm_tag_monitoring	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com	3.233.153.139	true	false	high
d2fashanjl7d9f.cloudfront.net	18.64.174.9	true	false	high
tls13.taboola.map.fastly.net	151.101.193.44	true	false	unknown
o160250.ingest.sentry.io	34.120.195.249	true	false	high
global.px.quantserve.com	192.184.68.166	true	false	high
segments.company-target.com	13.35.116.77	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
api.neuro-id.com	54.148.46.119	true	false	unknown
platform.twitter.map.fastly.net	146.75.124.157	true	false	unknown
data-platform.squarecloudservices.com	34.98.67.114	true	false	unknown
424-iab-218.mktoresp.com	192.28.147.68	true	false	unknown
stats.g.doubleclick.net	173.194.213.157	true	false	high
cdn.w55c.net	52.4.157.85	true	false	high
painrehabilitation.com.au	199.34.228.58	true	false	unknown
t.co	104.244.42.133	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	unknown
cm.g.doubleclick.net	142.250.64.162	true	false	high
cdn.sprig.com	108.157.173.109	true	false	unknown
www.google.com	142.250.217.196	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
q.quora.com	52.21.40.167	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
star-mini.c10r.facebook.com	157.240.14.35	true	false	high
logx.optimizely.com	34.111.140.246	true	false	high
s.twitter.com	104.244.42.195	true	false	high
lltrck.com	44.207.205.64	true	false	unknown
d2wpodxytd2amw.cloudfront.net	18.239.225.71	true	false	high
d1ykf07e75w7ss.cloudfront.net	13.226.53.63	true	false	high
dualstack.reddit.map.fastly.net	151.101.193.140	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	unknown
googleads.g.doubleclick.net	142.250.217.226	true	false	high
reddit.map.fastly.net	151.101.193.140	true	false	unknown
us-central1-sq-sgtm-prod.cloudfunctions.net	216.239.36.54	true	false	unknown
dotl3ol78edio.cloudfront.net	13.32.87.3	true	false	high
dualstack.pinterest.map.fastly.net	146.75.124.84	true	false	unknown
td.doubleclick.net	142.250.64.226	true	false	high
d-jt77dp51x5.execute-api.us-east-1.amazonaws.com	44.193.224.11	true	false	high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	54.234.41.35	true	false	high
cdn.cookielaw.org	104.19.177.52	true	false	high
www.editmysite.com	162.159.140.60	true	false	high
dart.l.doubleclick.net	142.250.217.230	true	false	high
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	35.85.25.157	true	false	high
api.sprig.com	50.19.89.137	true	false	unknown
weebly.map.fastly.net	151.101.1.46	true	false	unknown
squareup.com	162.159.136.66	true	false	high
us-vip001.taboola.com	141.226.224.48	true	false	high
dg2iu7dxxehbo.cloudfront.net	13.32.115.116	true	false	high
adservice.google.com	142.250.64.226	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	high
scontent.xx.fbcdn.net	157.240.14.19	true	false	high
tag.demandbase.com	13.249.98.43	true	false	high
squareup.map.fastly.net	151.101.1.49	true	false	unknown
d3vd5wnau9aeoh.cloudfront.net	13.226.52.56	true	false	high
www.weebly.com	74.115.51.7	true	false	high
arttrk.com	52.3.125.7	true	false	unknown
api.squareup.com	162.159.136.66	true	false	high
ara.paa-reporting-advertising.amazon	18.173.166.21	true	false	unknown
windowsupdatebg.s.llnwi.net	208.111.136.0	true	false	unknown
tag-logger.demandbase.com	13.32.87.44	true	false	high
twitter.com	104.244.42.129	true	false	high
ws.zoominfo.com	104.16.118.43	true	false	high
s.amazon-adsystem.com	52.46.155.104	true	false	high
ad.doubleclick.net	172.217.3.70	true	false	high
cs491.wac.edgecastcdn.net	192.229.163.25	true	false	high
syndication.twitter.com	104.244.42.200	true	false	high
dsum-sec.casalemedia.com	172.64.151.101	true	false	high
d1g145x70srn7h.cloudfront.net	13.226.52.128	true	false	high
api.company-target.com	13.35.116.120	true	false	unknown
analytics.google.com	192.178.50.78	true	false	high
capi.squareup.com	18.144.72.236	true	false	high
ib.anycast.adnxs.com	68.67.179.166	true	false	high
global.event.prod.bidr.io	54.144.182.159	true	false	unknown
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
rules.quantcount.com	unknown	unknown	false	unknown
tealium-f.squarecdn.com	unknown	unknown	false	unknown
pixel.pointmediatracker.com	unknown	unknown	false	unknown
12345.fls.doubleclick.net	unknown	unknown	false	high
platform.twitter.com	unknown	unknown	false	high
j.6sc.co	unknown	unknown	false	unknown
tags.w55c.net	unknown	unknown	false	high
onboardfrontend-production-c.squarecdn.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	unknown
cdn.optimizely.com	unknown	unknown	false	high
ec.editmysite.com	unknown	unknown	false	high
cdn.taboola.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
cnv.event.prod.bidr.io	unknown	unknown	false	unknown
a.quora.com	unknown	unknown	false	high
psb.taboola.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f	false		high
https://connect.facebook.net/signals/config/816297701715444?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=7e2f7c8b-e77c-4c6a-ac42-0b01a8ef2ca5&batch_time=1714104730260	false	Avira URL Cloud: safe	unknown
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts	false		high
about:blank	false	Avira URL Cloud: safe	low
https://api.squareup.com/2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831	false		high
https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html#dnt=false&id=twitter-widget-0&lang=en&original_referer=http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog&size=m&text=How%20can%20yoga%20help%3F%20Part%20Three%20-%20Brisbane%20Pain%20Rehabilitation%20Service&time=1714104690132&type=share&url=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html	false		high
http://www.painrehabilitation.com.au/about-the-program.html	false		unknown
https://cdn.cookielaw.org/consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json	false		high
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css	false	Avira URL Cloud: safe	unknown
http://www.painrehabilitation.com.au/files/theme/mobile.js	false	Avira URL Cloud: safe	unknown
http://www.painrehabilitation.com.au/files/theme/images/calendar.png?1644377169	false	Avira URL Cloud: safe	unknown
https://lltrck.com/scripts/lt-v4.js?llid=30484	false	Avira URL Cloud: safe	unknown
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles.js	false	Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://9628652.fls.doubleclick.net/activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?	false		high
https://www.facebook.com/v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb6089b8481d16d69%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90	false		high
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/chunk.122.426e8f84698648d4843b.js	false	Avira URL Cloud: safe	unknown
https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html#dnt=false&id=twitter-widget-1&lang=en&original_referer=http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog&size=m&text=How%20Can%20Yoga%20Help%3F%20Part%20Two%20-%20Brisbane%20Pain%20Rehabilitation%20Service&time=1714104690133&type=share&url=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html	false		high
https://www.facebook.com/tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET	false		high
https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/vendor.js	false	Avira URL Cloud: safe	unknown
https://partners.tremorhub.com/sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=8&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3	false		high
http://www.painrehabilitation.com.au/our-partners.html	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3iOSK4/yk/l/en_US/fEweerzOoLdN1tHVL5OZK-DYvatkvPhoO1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://www.google.com/pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721	false		high
http://platform.twitter.com/widgets.js	false		high
https://ara.paa-reporting-advertising.amazon/aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET	false		high
http://www.painrehabilitation.com.au/about-us.html	false		unknown
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg	false	Avira URL Cloud: safe	unknown
https://insight.adsrvr.org/track/up?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yV/r/TQ5rYX3IGJd.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCJrTrLEGEgUI6AcQAEIASgA	false		high
http://www.painrehabilitation.com.au/blog	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false		high
http://www.painrehabilitation.com.au/files/theme/plugins.js	false	Avira URL Cloud: safe	unknown
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816	false	Avira URL Cloud: safe	unknown
https://cdn.sprig.com/shim.js?id=mVfPI-96JuPi	false	Avira URL Cloud: safe	unknown
http://www.painrehabilitation.com.au/questionnaire.html	false		unknown
http://www.painrehabilitation.com.au/files/theme/images/comments.png?1644377169	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f	false		high
https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01	false		high
http://cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2	false		high
https://www.facebook.com/ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2890	false		high
http://cdn2.editmysite.com/css/old/fancybox.css?1644361842	false		high
http://www.painrehabilitation.com.au/files/theme/plugins.js?1530561231	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ijuz4/yH/l/en_US/14GmiBZnqb0.js?_nc_x=Ij3Wp8lg5Kz	false		high
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721	false		high
https://us-central1-sq-sgtm-prod.cloudfunctions.net/sgtm_tag_monitoring	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET	false		high
https://www.facebook.com/v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df8f69f638f7349a7a%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yx/l/0,cross/S0jWmsE7Isg.css?_nc_x=Ij3Wp8lg5Kz	false		high
http://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1644361842	false		high
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/9341587.png	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v2/ip.json?referrer=null&page=https%3A%2F%2Fsquareup.com%2F&page_title=3rd%20Party%20iFrame	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/202301.2.0/otBannerSdk.js	false		high
http://www.painrehabilitation.com.au/ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails]	false	Avira URL Cloud: safe	unknown
https://squareup.com/logout?return_to=https://squareup.com/signup?v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%26app%3Dweebly%26return_to%3Dhttps%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup	false		high
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/1922450623.jpg	false	Avira URL Cloud: safe	unknown
https://ct.pinterest.com/v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727889	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&uid=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&gjid=998327875&_gid=775248889.1714104719&_u=YEBAAEAAAAAAACAAI~&z=1941767255	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f	false		high
http://www.painrehabilitation.com.au/files/theme/images/scroll.png?1644377169	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=	false		high
http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bulk-route-definitions/	false		high
https://trc-events.taboola.com/1543392/log/3/unip?en=pre_d_eng_tb&tos=6147&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1714104733314&mrir=tto&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://squareup.com/t/f_online/d_display/p_phdp/c_brand/o_sq_sdk3_android_320x50/l	chromecache_317.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDc	chromecache_638.2.dr, chromecache_495.2.dr	false		high
http://g.co/dev/maps-no-account	chromecache_387.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_351.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_469.2.dr, chromecache_640.2.dr, chromecache_349.2.dr, chromecache_526.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_526.2.dr	false		high
https://youradchoices.ca/	chromecache_552.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	false	Avira URL Cloud: safe	low
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_381.2.dr, chromecache_502.2.dr	false		high
http://www.amazon.com/b/?&node=7253015011.	chromecache_327.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_387.2.dr	false		high
https://support.google.com/recaptcha	chromecache_504.2.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_387.2.dr	false		high
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_638.2.dr, chromecache_495.2.dr	false		high
https://bttrack.com/Pixel/Conversion/15905/default?type=img	chromecache_470.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://squareup.com/signup/us?lang_code	chromecache_491.2.dr	false		high
https://stats.g.doubleclick.net/j/collect?	chromecache_643.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_578.2.dr, chromecache_579.2.dr	false		high
https://fburl.com/wiki/xrzohrqb	chromecache_402.2.dr	false	URL Reputation: safe	unknown
https://squareup.com/us/en/campaign/take-payments	chromecache_491.2.dr	false		high
https://squareup.com/shop/hardware/us/en/products/register-pos	chromecache_491.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_387.2.dr, chromecache_426.2.dr	false		high
https://cloud.google.com/contact	chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_387.2.dr	false		high
https://www.google.%/ads/ga-audiences?	chromecache_643.2.dr	false	URL Reputation: safe	low
https://squareup.com/shop/hardware/us/en/products/ipad-pos-stand-credit-card-reader	chromecache_491.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_641.2.dr, chromecache_629.2.dr, chromecache_504.2.dr	false		high
https://www.quantcast.com/legal/license	chromecache_600.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
104.244.42.200	syndication.twitter.com	United States	13414	TWITTERUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
18.144.72.236	capi.squareup.com	United States	16509	AMAZON-02US	false
157.240.14.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.64.162	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.193.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
162.159.140.60	www.editmysite.com	United States	13335	CLOUDFLARENETUS	false
74.115.51.6	unknown	United States	27647	WEEBLYUS	false
74.115.51.7	www.weebly.com	United States	27647	WEEBLYUS	false
54.200.77.207	unknown	United States	16509	AMAZON-02US	false
52.3.125.7	arttrk.com	United States	14618	AMAZON-AESUS	false
151.101.193.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
151.101.1.46	weebly.map.fastly.net	United States	54113	FASTLYUS	false
151.101.1.49	squareup.map.fastly.net	United States	54113	FASTLYUS	false
142.250.217.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
192.229.163.25	cs491.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
146.75.124.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
172.66.0.60	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.217.230	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
13.35.116.77	segments.company-target.com	United States	16509	AMAZON-02US	false
142.250.217.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.35.226	unknown	United States	15169	GOOGLEUS	false
31.13.67.20	unknown	Ireland	32934	FACEBOOKUS	false
54.144.182.159	global.event.prod.bidr.io	United States	14618	AMAZON-AESUS	false
192.178.50.36	unknown	United States	15169	GOOGLEUS	false
199.34.228.58	painrehabilitation.com.au	United States	27647	WEEBLYUS	false
172.217.2.196	unknown	United States	15169	GOOGLEUS	false
52.205.65.239	unknown	United States	14618	AMAZON-AESUS	false
52.21.40.167	q.quora.com	United States	14618	AMAZON-AESUS	false
192.28.147.68	424-iab-218.mktoresp.com	United States	53580	MARKETOUS	false
173.194.213.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
173.194.213.155	unknown	United States	15169	GOOGLEUS	false
54.148.46.119	api.neuro-id.com	United States	16509	AMAZON-02US	false
3.225.117.71	unknown	United States	14618	AMAZON-AESUS	false
18.64.174.9	d2fashanjl7d9f.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.226.53.63	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
104.19.178.52	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.197	unknown	United States	13414	TWITTERUS	false
52.200.166.19	unknown	United States	14618	AMAZON-AESUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
44.208.37.64	unknown	United States	14618	AMAZON-AESUS	false
13.35.116.107	unknown	United States	16509	AMAZON-02US	false
162.159.137.66	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.196	unknown	United States	15169	GOOGLEUS	false
34.120.195.249	o160250.ingest.sentry.io	United States	15169	GOOGLEUS	false
209.54.182.161	unknown	United States	21719	CHLUS	false
18.239.225.71	d2wpodxytd2amw.cloudfront.net	United States	16509	AMAZON-02US	false
13.35.116.120	api.company-target.com	United States	16509	AMAZON-02US	false
142.250.217.166	unknown	United States	15169	GOOGLEUS	false
108.157.173.109	cdn.sprig.com	United States	16509	AMAZON-02US	false
54.234.41.35	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
13.32.87.33	unknown	United States	16509	AMAZON-02US	false
13.32.87.3	dotl3ol78edio.cloudfront.net	United States	16509	AMAZON-02US	false
44.207.205.64	lltrck.com	United States	14618	AMAZON-AESUS	false
18.173.166.39	unknown	United States	3	MIT-GATEWAYSUS	false
52.46.155.104	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.244.42.136	unknown	United States	13414	TWITTERUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
104.244.42.133	t.co	United States	13414	TWITTERUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
3.233.153.139	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.173.166.21	ara.paa-reporting-advertising.amazon	United States	3	MIT-GATEWAYSUS	false
216.239.36.54	us-central1-sq-sgtm-prod.cloudfunctions.net	United States	15169	GOOGLEUS	false
13.249.98.43	tag.demandbase.com	United States	16509	AMAZON-02US	false
44.193.224.11	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
13.226.52.128	d1g145x70srn7h.cloudfront.net	United States	16509	AMAZON-02US	false
192.178.50.78	analytics.google.com	United States	15169	GOOGLEUS	false
146.75.124.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
13.226.52.68	unknown	United States	16509	AMAZON-02US	false
3.228.185.195	unknown	United States	14618	AMAZON-AESUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
157.240.14.19	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
13.32.115.116	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
162.159.136.66	squareup.com	United States	13335	CLOUDFLARENETUS	false
192.184.68.166	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
52.4.157.85	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
35.85.25.157	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com	United States	237	MERIT-AS-14US	false
192.178.50.70	unknown	United States	15169	GOOGLEUS	false
141.226.224.48	us-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
172.217.3.70	ad.doubleclick.net	United States	15169	GOOGLEUS	false
13.226.52.56	d3vd5wnau9aeoh.cloudfront.net	United States	16509	AMAZON-02US	false
34.98.67.114	data-platform.squarecloudservices.com	United States	15169	GOOGLEUS	false
50.19.89.137	api.sprig.com	United States	14618	AMAZON-AESUS	false
34.111.140.246	logx.optimizely.com	United States	15169	GOOGLEUS	false
68.67.179.166	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
192.184.68.215	unknown	United States	27281	QUANTCASTUS	false
13.32.87.44	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431975
Start date and time:	2024-04-26 06:09:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.painrehabilitation.com.au/contact.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@41/658@309/97
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.painrehabilitation.com.au/ Browse: http://www.painrehabilitation.com.au/about-us.html Browse: http://www.painrehabilitation.com.au/about-the-program.html Browse: http://www.painrehabilitation.com.au/health-professionals.html Browse: http://www.painrehabilitation.com.au/research.html Browse: http://www.painrehabilitation.com.au/our-partners.html Browse: http://www.painrehabilitation.com.au/blog.html Browse: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Browse: http://www.painrehabilitation.com.au/referrals.html Browse: http://www.painrehabilitation.com.au/questionnaire.html Browse: https://www.weebly.com/signup?utm_source=internal&utm_medium=footer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 142.250.217.206, 173.194.210.84, 34.104.35.123, 142.250.217.202, 142.250.217.170, 142.250.217.163, 142.250.64.238, 142.250.64.142, 172.217.15.202, 142.251.35.234, 192.178.50.42, 142.250.217.234, 142.250.189.138, 172.217.165.202, 142.250.64.202, 142.250.64.138, 192.178.50.74, 172.217.15.200, 142.250.64.206, 172.217.2.202, 172.217.3.74, 142.250.64.234, 142.250.64.163, 142.250.217.195, 13.85.23.86, 208.111.136.0, 192.229.211.108, 52.165.164.15, 13.95.31.18, 142.250.64.170, 142.250.64.227, 142.251.35.227, 23.205.129.43, 104.109.132.152, 184.28.120.195, 23.61.57.185, 142.250.64.232, 172.217.165.195, 142.250.217.232, 142.251.35.238, 23.61.59.6, 142.250.217.200, 172.217.3.67, 142.250.189.142, 162.159.152.17, 162.159.153.247, 13.107.21.237, 204.79.197.237, 104.89.170.200, 104.89.170.207, 104.89.170.133, 23.221.212.61, 23.221.212.47, 23.221.212.62, 23.221.212.63, 23.221.212.79, 23.221.212.55, 23.221.212.70, 23.221.212.48, 23.221.212.60, 104.89.170.143, 104.89.17
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, e10776.b.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, www.gstatic.com, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, ajax.googleapis.com, j2.6sc.co.edgekey.net, od.linkedin.edgesuite.net, edgedl.me.gvt1.com, wac.apr-8315.edgecastdns.net, clients.l.google.com, star2.cdn-pci.optimizely.com.edgekey.net, maps.gstatic.com, a1916.dscg2.akamai.net, bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, a.quora.com.cdn.cloudflare.net, ipv6-2.6sc.co.edgekey.net, e5048.dsca.akamaiedge.net, wildcard.marketo.net.edgekey.net, maps.googleapis.com, e13740.f.akamaiedge.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, sls.update.microsoft.com, bat.bing.com, analytics.tiktok.com.edgekey.net, e
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17926
Entropy (8bit):	7.953335225515369
Encrypted:	false
SSDEEP:	384:rI8m5WSqxdnsUn9wMwzJPiEHP6y8d3YQAnk5Dtx1yOPulQHnh1dx:rI8m5WSMd9wv9BHSgwDt3yOEQHnhl
MD5:	35C0BF7E9767300F95D826DBAFEA69B0
SHA1:	E7F73F8C8437B702038EDC8D9E9E0BDBB76E7C0F
SHA-256:	1E5F1F35957304C79CDC7DD03A3FA4134D3F4799D4C47AE1EEDF6783153E1949
SHA-512:	101329408CE35CC9446FA710597785675D22677D7E33A2571D2DB9481B53D0C5AC1AC5D9B1DECC493CD55C5E8529443215D16C30994BD0457329BFB057BBE835
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30304!3i18994!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=76723
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz............y~.....................................NRV......WXZ...ehl.....'.E..i.}......8./2 !$N.f.....%......4.S=.Z.....J..o.......l.C.....D.IDATx.....8.-......+}.j7..s....... AI..3....2S......M7..q.m:u...n-WS...,./..5s.;_ZAQi#+.6..._....{l.b.+.Y..G...ZY;3._...^dzS}.xz....+.z............w.....U_.Q.x`..1...j[..........l..h..3.L..3.\.V.O..B......<...c..'....7V}.A.XXEA7..020....z..w........j.......2w\c.m5...]....\.?=[.V.:.].M......^1.I+.[.....>.@........F...&....h....2.n8......F.f[.Nn7.).ol...wZ3.v...4c.....0..pS.....MQ.\|....\|.B..U...g..S5\+.2..H..:u\|l_?.. p.....x;.....f.v.:.!....;.....bgu......X.K.....Yt.3/AaN..j.u.Z.....7h'.?..+9.D....eNv..@.J..........TKb#.Z"XM,y.... ..,...-.5X.k_\|.f..q./..{GK....K.i.u...........gw$..>.q_.J..........jW-..c....'.U......h.........{.......O.~.\|.u...n...."....$..c..?..\.$.-k\|..L.~....-.....e.g.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153724
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 191x301, components 3
Category:	dropped
Size (bytes):	14336
Entropy (8bit):	7.958034509800068
Encrypted:	false
SSDEEP:	384:9aSdNGuy5lmYZmqCwZwWeNkK75s0gvpZ5:9/GuyuYINkK7Op
MD5:	0FCC8232A0300117D3FE831FA3B0B0F6
SHA1:	CE725D8D59BA55AE481917CFD92C5893A752D5B5
SHA-256:	9BFB4E989156F2ECB90C7C37F3D21079397D29687E2D8BD79F2FE7CF92577849
SHA-512:	988DD5D497D20135BD282559CA67E89F151BE498186AAD3359EC6C50181CA90BBB042912A5EE1C985ABCBBC69547029093150D38F844591E3E0894C3E5A22E32
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................-....".........................................B.........................!..1.."AQa2q...B...#.Rb.....3r.s....%4c...............................,.......................!.1A."2.Qaq#3B..$..............?..(9..;Uh.\.x...\....h5\..z...j..z...V.'j...V....VO.A5g...9.....V.w.V.c.O\|..Q..=qY...A.B...T+5.\O.R.^.C...z..W....P.k...j...Wf..p4D..U...\..W.........FI....m$......Qv........U...n[-1?..S.=.k...M."u.h...&.owd.z.Z.D................Mu..f....p....H..!?.......2....[.<..\.Z..eOZ....0?j..C..\|...y.[......H ....D`}.......+...juX..%J...Q..'.k.\.0.6.}..-.....S.7..1..5S..(_.Gi.......Nu %.R9.h..B...#..L:.. .m.........s.-)+O.2q..[{z.ZE.J.QU....!a_.:wY.....kK`...n}..M\|.......K..E...!JJ.......4..fR..+.....wv.7H.k$.....%.2\|...Q])......6HO>.....\|.P...i....\|....{....T&..{.Tv?....5iIvj.5L.9...>.Bj..j..k..T.j..j..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	dropped
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1837
Entropy (8bit):	7.350999106477808
Encrypted:	false
SSDEEP:	48:lqQNn2qDlgxJ3xRPMgKjw/x7udB+9A3Laoer7+YH23:oY2olgJRPAw/x7qVGoJYg
MD5:	339A7F37EB8527F719DF1BA12D2CEFB1
SHA1:	D73B5156E2F6AC0A8C82E235BE758CB9D105B18C
SHA-256:	3A8FC37ED708C8E7D7DBD4D86F5B68A8B1DF9BA0B651DC97D74AC7D26D307DF1
SHA-512:	20CC544DE6A40C2AB6F77F8ABF6C2FFAA67D48028248FF557F236AD38B4C78D5920F0B7C81424334DDCDCB309E435432B77559DCF939F0D88C3635C0AA1F09D3
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/scroll.png?1644377169
Preview:	.PNG........IHDR...4...4......x......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:B954E383F32311E39A81E3BCD8F08007" xmpMM:DocumentID="xmp.did:B954E384F32311E39A81E3BCD8F08007"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B954E381F32311E39A81E3BCD8F08007" stRef:documentID="xmp.did:B954E382F32311E39A81E3BCD8F08007"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.4......IDATx...KTQ..c. :..@....[.).f.P.E..r ..........P[.0...D+...\..j.6..B6='.........7..!\.y.y9..;.$...T....

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	18364
Entropy (8bit):	7.948684921105334
Encrypted:	false
SSDEEP:	384:oL4n2qdtHG0W5R4q9mLb44dlvXUUoFznIwShzS0aT27cQpexhz:oL6dtm0u4ioJnvHoddeJU2gQgzz
MD5:	D1049597059131AD5B6549FA9832946C
SHA1:	E0FB35A4B0E9A57D3DBD8B311F5723093729C416
SHA-256:	77ADC1674DE39D25870AA7F0AF40DB0490CE977D1129AB4E37706BEEB275F33A
SHA-512:	E25B47D5C8CC66F4EB8766EC2922B9BF4A2AE68E626EC4AECA49AE0DB9E0CBAB54C0E378C3A1741A0B212093EE8812B1B6E922EFDB4B0A5542EA9557CED8CE5E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...................................................y~...........puz............................o.....NRV^.w.....$.D..WXZ....... !$..8./2efh..N.f..........=.Z...4.S.....=...F.IDATx....:...............vWI.$!.{..j.>.mc.-..eZ..8,v.u..~...M....4-."I.2...p....0...\|...<.w.S.z.,.`.n.........[.7<g.m.....M+...).rn......D..Px......ua...8..b..}7..\|....g.B ..y.9...j..q.l..[..e.....=.q<.g.~6.=...+....i..z......Eb++..n..Q.......2.'O..y.V........@..v...v:...u}yN:Im...-G.(..w[..C...K... ...X..m3...5W......{.K...s......_\|y^..a.....y..d6.L....g.....g...0f.nY...5.p..R.).4.....0H...}...#.vF.5>.\>.....]..tP.IY.1~K. .....A.G%.DZ~k. .a:]M..#...-K..f....LC01.......n,....0a....QZ..C~H.X}}....G....T.@\`..5.....k.'.x..!_...P....J..zT.P.=....X3.. N..J..U......A...B.~#b.C. .>.[.8.?..K;............g.O.t......u.+o;.m.....aA.-IL@../.>..........b...D.:...i. U.'...@ ...wc.a%......i:.BH...P@..]o.M..*.......

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9337)
Category:	downloaded
Size (bytes):	9338
Entropy (8bit):	5.448438842764802
Encrypted:	false
SSDEEP:	192:rZCpZt8CpyXFKZ8uSd7hGX4ifIMMQiVRvrhCN4yS7SoeLbe0trmmUZ:tCTt8Ckappizv8N4yieLb7M
MD5:	A6A19C076EF98C1E741DDF2A605D338A
SHA1:	E8474478CBB0116D59F1521DD9087E6BC47600CC
SHA-256:	295E05E1EAF677895A9E2F5FFE2D371473AB8EA14517F1974C897726F48D557B
SHA-512:	0F8380BABFAB8D891B455662E79AF8DC640B74E94A9A9115136AC261F7BC762F1F1219D8F4C838395FAA77C26C31534739E8B7466F1D2E0171A5A9F3488A1639
Malicious:	false
Reputation:	low
URL:	https://martech-production-c.squarecdn.com/martech.js
Preview:	"use strict";function _createForOfIteratorHelper(a,b){var c="undefined"!=typeof Symbol&&a[Symbol.iterator]\|\|a["@@iterator"];if(!c){if(Array.isArray(a)\|\|(c=_unsupportedIterableToArray(a))\|\|b&&a&&"number"==typeof a.length){c&&(a=c);var d=0,e=function(){};return{s:e,n:function n(){return d>=a.length?{done:!0}:{done:!1,value:a[d++]}},e:function e(a){throw a},f:e}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var f,g=!0,h=!1;return{s:function s(){c=c.call(a)},n:function n(){var a=c.next();return g=a.done,a},e:function e(a){h=!0,f=a},f:function f(){try{g\|\|null==c["return"]\|\|c["return"]()}finally{if(h)throw f}}}}function _slicedToArray(a,b){return _arrayWithHoles(a)\|\|_iterableToArrayLimit(a,b)\|\|_unsupportedIterableToArray(a,b)\|\|_nonIterableRest()}function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35261)
Category:	downloaded
Size (bytes):	543834
Entropy (8bit):	5.542434317816208
Encrypted:	false
SSDEEP:	6144:3GxjrjtBdZQXYN8MYLceF+t9TnXP9RIM0HHk:kjrj77FSpdxnk
MD5:	2A6ABA02E8E3C0F16F3B5F4AE00FF32C
SHA1:	050003B79EBC201D049E0DED18D7329EC8468A69
SHA-256:	FFA7DDB94D03B5003A5BB65390337FA6AF04931C0F1B9E5C2B32734D2579A353
SHA-512:	3D847B9973484233AE8974ED530BD58D23558EE86630D45242C60CBEC72178DF8F46E01C83F2A3A45627D71A9BA8557014E629623698F79D7B10A75AFDA9F0B7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PS2PXZD&l=martechJsDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"215",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"env"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"onboard_account_created"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"variant"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_url"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_token"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"avt"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"null","vtp_name":"country_code"},{"function":"__r"},{"function":"__u","vtp_enableMultiQue

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/favicon.ico
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7884), with no line terminators
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	5.0998127410555885
Encrypted:	false
SSDEEP:	96:D6lTNLh4bLRaHHSekaXWuJB6YvJnfI6GPX5ELjFeF6yM+Hm+/:DF/8HHSekwWSFK6G/5ELMF63+HD/
MD5:	FDF02DD038ED38DBF3C240D56262AF0C
SHA1:	9C38EDFD3642747DB836A3A1F3A41328611D48B5
SHA-256:	426E16D014775C77916610F675F58880874C645817ED26D01873DDE3466E6007
SHA-512:	62EC1B51CEE4CD4F2CCE283A2EC2065C04208F60EA6E4A423839AA37FBD5768F9FE5A3A5959508C757CD679BECBE4A77305A05E6276E90A4F282FEDA4699B53A
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/js/button.856debeac157d9669cf51e73a08fbc93.js
Preview:	(window.__twttrll=window.__twttrll\|\|[]).push([[2],{160:function(t,e,n){var r=n(39),a=n(162),s=n(7);(r=Object.create(r)).build=s(r.build,null,a),t.exports=r},161:function(t,e,n){var r=n(71),a=n(37),s=n(34),i=n(38),o=n(0),u=n(7),c=n(33),l=n(5),h=n(165);t.exports=function(t){t.params({partner:{fallback:u(c.val,c,"partner")}}),t.define("scribeItems",function(){return{}}),t.define("scribeNamespace",function(){return{client:"tfw"}}),t.define("scribeData",function(){return{widget_origin:i.rootDocumentLocation(),widget_frame:i.isFramed()&&i.currentDocumentLocation(),widget_partner:this.params.partner,widget_site_screen_name:h(c.val("site")),widget_site_user_id:l.asNumber(c.val("site:id")),widget_creator_screen_name:h(c.val("creator")),widget_creator_user_id:l.asNumber(c.val("creator:id"))}}),t.define("scribe",function(t,e,n){var a=this;return s.getHorizonSettings().then(function(s){var i={session_id:s.sessionId};t=o.aug(a.scribeNamespace(),t\|\|{}),e=o.aug(a.scribeData(),e\|\|{}),r.clientEvent(t,e

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142320
Entropy (8bit):	5.596620011704958
Encrypted:	false
SSDEEP:	3072:vOe03o4PwjWGXwMr1JCgc0NX3oXKzXXE2:vBWKwMrM0BYGE2
MD5:	819BAE32C531E7B58F2CB0CE08A0B478
SHA1:	778541C704FB07D61D7FBA1014DB18ABF9027514
SHA-256:	A869FE8CDDAF23F1EE50724C35748CEFB30C697095B2CF4A231033CB8F43B4AB
SHA-512:	82C52C30CCAB0F13CFC4D1A718D4C1A6B04422F751CA84E20C5BCB62D21A6C026A4FC28FD7BB5B525FCE158FCF37F9FF6DC309B62EC537B8A3F3C623EC64284A
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_c26a2.js
Preview:	(window["webpackJsonp.TiktTokAnalytics"]=window["webpackJsonp.TiktTokAnalytics"]\|\|[]).push([[1],{"6rls":function(d,t,e){"use strict";e.r(t),e.d(t,"getCookieDeprecationLabel",function(){return Ot}),e.d(t,"getAllTopics",function(){return mt}),e.d(t,"isHash",function(){return lt.c}),e.d(t,"sha256",function(){return n.sha256}),e.d(t,"parsePhoneNumberFromString",function(){return $t}),e.d(t,"validatePhoneNumberLength",function(){return ut}),e.d(t,"checkEmailFormat",function(){return lt.a}),e.d(t,"checkMDNEmailFormat",function(){return lt.b}),e.d(t,"genIdentifierLabelByUserProperties",function(){return Kt});var n=e("bCcq"),r={version:4,country_calling_codes:{1:["US","AG","AI","AS","BB","BM","BS","CA","DM","DO","GD","GU","JM","KN","KY","LC","MP","MS","PR","SX","TC","TT","VC","VG","VI"],7:["RU","KZ"],20:["EG"],27:["ZA"],30:["GR"],31:["NL"],32:["BE"],33:["FR"],34:["ES"],36:["HU"],39:["IT","VA"],40:["RO"],41:["CH"],43:["AT"],44:["GB","GG","IM","JE"],45:["DK"],46:["SE"],47:["NO","SJ"],48:["PL"],4

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1405), with no line terminators
Category:	downloaded
Size (bytes):	1405
Entropy (8bit):	5.792878108123544
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbC+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:iEc3KonR3evtTA87b1Muh6LrwUnG
MD5:	BF0FE1CADA27565036BD7ABD78A8C6A8
SHA1:	4A514425F7B884B9B762CEE40FD52609FE8FA4C4
SHA-256:	82EDE96FF185B61645BFD3C4EA42665D13EFD6C276C785700DE18296AA7B0499
SHA-512:	861150697DF89E1B1D5311FB4CBC369B9378D238BC10ECAE2F3BE2329FEE9D83D287B83443E717CBB03627E7ABDDE36EE89D756F7A9AC6C8903CAD3BF92C8D8B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m)

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30544, version 3.393
Category:	downloaded
Size (bytes):	30544
Entropy (8bit):	7.993476238506714
Encrypted:	true
SSDEEP:	768:YjKxd3iKMkJ6qwcj+OUvTMkrKwn4Vg5p8Vd:HxsKJkcj5s/rKwn5Tm
MD5:	B156AC1A0B662CBB49FC81330C8E7B35
SHA1:	6C4528CF71E190D482615577DD96D13A305AEE75
SHA-256:	410A6FB4F84C0A3B6B9C36BBA03C99CCB59A362685AA9C97DB05BDD58B20348C
SHA-512:	6DBF3FA504F481C44C60053E1BEBC191BB69BDE3D45F8FD6DD23E85DE2CD8B2953761E89D3E730C0C62D3625B07CCAD976AEE1AA9362F8E77E3878FA2FEFD43E
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-bold.woff2?1713982826
Preview:	wOF2......wP......K...v.........................?FFTM..Z......J.`..6....s.....t..>.6.$..`..r.. ..B..u...?webf.[.,q..6.sZPn...v.]...86...[.Pq.+.6.g....u).....s....'.?...YZ%4@3H.&.".Y#.,.@."H6..GWn.Dv7ij.j............./X8. .FHy.lBi.v..&..w....z.....!.\..X.".Upy..#._SN.qQ.Wm....HB...2.}.......bv..K....V.....v.L.4X..z.C..o...tt'...O~.l./..)..r. 0y...3e.L...p.Y..,.-...?E.RU$?R\|.?.5.......+$-.......}...U....}.I.'BZ....M'..!R[..[...0..Lm.7..W.......l...!~....=Q1...(.X.:...]....+..+..\..s.5..e-...[30..&\.@..t.`...3lD[5.//......'.........x.Nd...cXo@d......B.....lg......S...4.!E.....CZ.._....o..u...d.w...I....>U....j@8`...../.Z.......6...LQ@}...07Q/H..ml.cc.cAH...r.H....`..A...h.~.]W....Q.3DQLa.Q...E....0...a......s9..........QqJHr.(V...../0!...DPv.._(Z.....x.sF.fY~8t....@.`...zwo.E.EcE.Uy.K......,.......L.'......=..Wj.u..... .D.]..&I..w8?9`...AxP...{.,M3s...:..H.[..{v....?....&.....>..l.}..u..^*.I.....d.xW...>..p..3.dO..q...g....M... .

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.011396230736189
Encrypted:	false
SSDEEP:	3:YAoC+rAIiA0vL/ATzAW:YAoCpIb+ITcW
MD5:	85879C8031C63CC2BC471DC25F2D969C
SHA1:	E33BF2E205F485D8FC9A32BCEFB0770C8335D799
SHA-256:	5811BECFCEB9C687E1B7AF2CADDC84272B8B0790E418BC90414BC91505684B73
SHA-512:	793112BE109E3EF4057672BDAD9FF104A10CC89036B687CF5FDD87A60BBCCEB6A00A97664CED8922C55FF2892EFF027BDF14D4ECD8D4F7AA90BF8090A208E2C4
Malicious:	false
Reputation:	low
Preview:	{"employment_token":null,"merchant_token":null,"person_token":null,"unit_token":null}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.304047012067739
Encrypted:	false
SSDEEP:	3:bh6G3XWZNDrMyMcI:bnXS5O
MD5:	5F0F189DF26B983E504C57C93E2E2550
SHA1:	9C29EF706A62DA23547EF12E27E2A20E7696BF38
SHA-256:	35AEF489B9D481A4BD66C9B893C7C5859ABC3475E5B63B01D151DD6C893063E5
SHA-512:	2A85E30D95F2B3FCD7C2D7068ED3E9E751E26F5595B6D8B1D6A83C56F395E985FE827DDA6D7DFD5C7CCB6F504B8D3FDF54AF4BFA77547B9A138E7A760C4479B4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkbMnFS9SzlUhIFDYOoWz0SBQ3Fk8Qk?alt=proto
Preview:	CiIKEw2DqFs9GgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgC

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.191445610755576
Encrypted:	false
SSDEEP:	48:9DoH8yAXQ8K5UvCUbpXtlhMVDBilhB7IODnNcynEJPMHErU8ACbtRKO7nhe+:9DlyAXQ8yUdduBiloycKeRg8xbtsO7
MD5:	4D27526198AC873CCEC96935198E0FB9
SHA1:	B98D8B73AD6A0F7477C3397561B4AAB37BF262AA
SHA-256:	40A2146151863BCF46C786D596E81A308D1B0D26D74635BE441E92656F29B1B4
SHA-512:	1EE4B73F4DA9C2B237CD0B820FFAD8E192D9125CE7D75D8A45A8B9642CE5FE85736646CAF12D246A77364C576751C47919997D066587F17575442A9B9F7CC97F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................D;3.C;4.D;3.D<3.D<3.D<6.A2".Pc..........M>5.....E;4.D;3.D;3.D<3.F<5.E<4.................................................F?4.ID5.D<37C;3.C;2.C;2.C;2.C;3.D<3LE=3.E=2.D<3.D=3.C<2QC;2.C;2.C;2.C;2.D;3.D;46JB;.G>6.....................................E;4.H<5.D;3]C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2.G<3.G<4.D<3.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3[C=7.C<4.............................H<7.B;1.D<3CC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<2nD<3sC;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3@B:3.HA2.........................D<3.E<4.C;2.C;2.C;2.C;2.D<2.C;2bD<3pC<2.C;2.C;2.C;2.C;2.C;2.C;2.C;2.D<3lD<3^D;2.C;2.C;2.C;2.C;2.E<3.D<3.........................C;2.D<3FC;2.C;2.C;2.D;2.F=3.E=

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3507
Category:	downloaded
Size (bytes):	1488
Entropy (8bit):	7.850471736908333
Encrypted:	false
SSDEEP:	24:XRL2F3alDmrNn+UfGiT3V4Vx2InxQxOVSy+tzc4/zJklNURbbsXo0YP6UA618odu:XyOi5n+y4Vx2ImvjzccqlCRXn6Uf18oc
MD5:	0D1C9FB7005532E7B245CFDF1280D805
SHA1:	2466421992F1FB0E44829833AAEE7AFC0E5AC7CC
SHA-256:	8691B92EED1360903B2182D81E491C80141D0CD051366CE3E8C4F359538EB1FF
SHA-512:	DC8AD32D6036B5A06CF7C1847C071BD53C6D71325087F0FA316FD9B14EC6879445CCAE37238DE8FFBEDD80D4F73296DA161512336BDE3DCA4A9030CB0ACAD695
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/images/landing-pages/global/logotype.svg
Preview:	..........uWMo.7...Wl....(r......D@{q..i/.9.F.bK......J..T.%.oG.......tw.......v....n....j.........\|s..c.=n..5l<.?..z..y.......wO..w..E.........~}8.......#..~5#....N&.n7..............M...v._.v.......f....M.c~.M.....z..\..t7.....7....as....v......E...-v.?/f./G...ps....a.b..Slw1.?..V.f9...^.S..p....~....o.gR.......cy.......c...S.......>\|......x...N...........s...c......R....J.:J...:z...M..).SK1p..w.$$.."..d!..p..8..6..I..bjPq.!.MpQ...}...8(.$x.Y(PW%......0..EYY....&.S.V).:D.)...[.v../....wY.-.....f4Q$..4s.@K.T.$..i..N.K9S.\...G.B....X-..R6i..A.E.aR\|..u2-IW~):..M.N.B.%c5.R.(.{..e...$..M...%..].0;T.9D...W8L....7.=..xy...G_.......8z~U....-0.......4.K>D.I.....\........A\|. ..8%/Qjx.....h.9...Z........\|...Qb.!P.....!7....!.X.f...:6.,...%.+].._..T..M"....x.........Zc.$......_......QVc..<N.J...4.I...@.T..2...K.S..J1...m.Y..2.......H...8Em...j)HK.11.J5....Ab.j..w.....l.!..PhT..v.}N.........`..\...-.s.......q.....(..i1...........5.EJ<8...<.\.k(L..C.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1690
Entropy (8bit):	7.27713716142832
Encrypted:	false
SSDEEP:	48:cxqQNn2qYSgBJ3r7n/c6x2zFcFA3Ksw2qbpgr:VY2PBCF0Irqmr
MD5:	1F045450638098444665375FA5B56412
SHA1:	63E737FC94C7AC3A9EDAB9259FC052E6BB46FFFD
SHA-256:	BDCCDE3F44F13B0314FA16E7370BF4752F3615D9CE74884E03952B4FAD35F866
SHA-512:	6F8E072590B1FEA4E22DE42AE4F3A8C4D02361F7FC37B6B2F7F60957CBBED3538E46840087ED0D0BBC6A39834E2CDCA8BA9C76407CDE1DA072F6A2D83AF6EAB6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\|.0....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE5FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBE6FBAE11E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1EE4ECECFA5211E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:6326BBE4FBAE11E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx.UKK[Q...\._.Q.y .`...[...,.+!>.(."..q..Z.-.nJ..]XH.E....&-.....7.\|.1...L.}.HL.-....s.........D".

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
URL:	https://psb.taboola.com/topics_api
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3911
Category:	downloaded
Size (bytes):	1218
Entropy (8bit):	7.803784631243532
Encrypted:	false
SSDEEP:	24:X6V7FONgq8XRLA2nTI5wHt28jglmndtRzldur2SIe8HWXWeqAcFsAx:XshON38dTI5wH080mdtl3aBI2W5AcyAx
MD5:	B644E92258F4C7C0B4270047652D1E60
SHA1:	93734D52EE9E86A768159E514076051813C39CD9
SHA-256:	29199496FB817668F887938571046ABCDFB49063D0207D571B361F221F467907
SHA-512:	1A741DA2061DE84394897136979C9DC2FDA4855BD17C758587F12AEC7939E41B365A4A7D4A545D0953714E64DA79956837D59B8B8005E2CCD9B5B0448E0A71F1
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/css/old/fancybox.css?1644361842
Preview:	...........W.r.6...S..tf.ca .n...L......V#$F.].w..F ..6.....w.st.\|..T.....98%a.Fv.....Q..N..3..y.b. .%..M8,.7...8m_)w..t....{..J.h%q..oR(g...t...v.....\....(...S..\.H..q.r.r.Iv"R..3....T..:5.kDK..<.y+.8..&..H....p.$..9J.....$.+z"Y....G^....d.`B...v.)rV.=.R.Y..H...t....!....)..3.....8j.A../....hm>....A }.....p...9.$.y...A6....z#.+Uh8..B..t .8..G..R.....\.1@.I._...v":....H....7I1[....%.V#E....J.v.. .V....p]&.u.+i.0\|Is&.....Q.kv t.Pf<.....6n.Sw.....s..L....$^:p .Y.F.Y..Q....3n7..c.....F..a.....)#.z&....`rcg..."....P......Xu...(........Q...G.B..A9..I...oYP.SgQ..)......?.@/0....1.J.....$...:....%..@..K8.\|.u#..\...\|..f..G..(...H..zi...l.b.Er....M9:7.....Bb#....F.eHs....1.R]...@/.}..<.D.l..N..Y.f...............E.n..D[.S...U.[bZ.u.]".6.z/}e.....Q\|J....(.......%.\.w.E......O..I..w......Gw.L@6.eC.1fq....W.WC.,d..&.B)Q.U>1......\|\|T......:t.......^.\... ~.?w..x........3......^b..t.`t....z.M...&.....wT.aq...]..&....4._]!.^!.M.4''..Y..Y....4....i..J.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 75006
Category:	downloaded
Size (bytes):	25752
Entropy (8bit):	7.99017231679915
Encrypted:	true
SSDEEP:	768:l9fE7rH8cw5v3PQ0GO7HbNXeNj3aDJ5ntCrUI14:l5EpMv3IneRuNDadd0AI14
MD5:	234327230ADD9A5A5D61A48829EA4565
SHA1:	7966CC0E4BD76F88FF193C8A99A067DE804B7129
SHA-256:	BB696C58D9AE5FA635B3FF22EFDF60DE9AC2F8EF9DF5E2F2D58DD5F8DC99DF75
SHA-512:	E51403D58E8711C7DCE802F978AA799F0F24E6B806C1978E29C00FBFE6B398F7A423F7EE95814005E2DB094CF190765C7A6B1473303743D3CCE4D13931328798
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/wsnbn/snowday262.js
Preview:	...........}k{....3.....HC.....xm'v..$v..0~.. ..$q.a..[U}QK.$s...d......u..n........]gm.t.tJ........vuP.Ouz..p.w....Z..7.....jmm.....nm..C...p...........LD.}w.M7..a...9...x.......9.y..[.A...rq'....\|#hz......7.o....x........b...o6..8?,...E.P.7x.gw.2....=1.....Z.W..6..$(..%........6.2......1c.[......7h.J+.s..v.....K.~(.......hb.q1.W............[W.....{.J.d[q.,.v.U........z~....U..+.p.%....... .0!...d.D....;~........{6.7?...e;.........b..}.xh;9k..l#.m0.;.Q\....P9...".......8...}....).Y....e.S.....h..u/\M?........4V.D....S.>..../o..Ba.~...a..}\<.......R......-..K.^...r./-...[-L..Vm............3ljVl}.....I....m>d.N.A..^....{...;.e....c\|.....[.....C..n.^....;$~.D.Y...V..... ....y....x...>.`...I2.fbU..Z..<@..g....b.6\.Q.kf%.Y.5%.X'...........F....COc.....2......z>4...,...X.._...iHl....^(%..c.&x....]......{.(...P......d.E..{P.z..Jg(bO..Q.,@...:..u ]......P....~...f...y.)..%.....0....h.%.H\...........Z...K@.......$...e.EaQs.....+r..!.=.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	dropped
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 991
Category:	dropped
Size (bytes):	465
Entropy (8bit):	7.588028793512717
Encrypted:	false
SSDEEP:	12:XQf8YPsE+leoV81SzBbxQHtiaTA3GpXu/dV:XQ5sEy3VZ+tiak4XKdV
MD5:	0A676DBD2BC3021EB0F5FAF4398CE836
SHA1:	E3E8A58D546A8E2EA9F2F30C295A222E65D565FD
SHA-256:	EB8D365D19EC8AF89EA55B8C98B18C42776533EBE5A34B3402DB83A7BF9AC6B7
SHA-512:	CC9A8EC817BF0E5090AD7451B058353D90311B55DCECB421170F6DBA10DE876731E88A0DC039A633E2B518D44C9B96616FEB87D81010ADDA0493298DD8331EDB
Malicious:	false
Reputation:	low
Preview:	..........uS.R.0...+T.....8.\|.......&.ra...nE.CA.YNw..r./.x.=.....r....%..}.1).R..O.....F....b...\|...~...q'...0..y..F.<......e..+k.Bg....}...[e......#_w.J.].K.O"a..>H..p..g.."R.'..U.._.Z....j......M.4x....p...h.....`..C3Cf.s,.X....o:....F....B.)[aG.W.A...o.D....Vzve3....fo..........:.;.u....b=.u.}k....)l.`.`......q!./...aBE.D.E3...-K......;4..+..=.........g..=.DmZ.&P)1E.8.2.#[...`A}b..\./aQ.jVU......AH.1._.?.....w...nrQ....

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	dropped
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	dropped
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 179838
Category:	downloaded
Size (bytes):	57793
Entropy (8bit):	7.996276186399069
Encrypted:	true
SSDEEP:	768:X/Aq/Xpr58LRiCIxvlhBVqh4T2bOxdbBIoVleCZemdMXWLPfU/shN7QDlqDsy1pR:vAo/QRNKT2yxdqoKCZLtffepqD95TcE
MD5:	AEDEFF6961CD8308A20A7DB90C8E321A
SHA1:	58538C07644B9CADF935E2047B87D8749B60960D
SHA-256:	E0531E3FB0C15CCA1E8124D94C7DA33FBBE22AE4DE7EBB8DF0A8328DD4234F34
SHA-512:	5B2720C7E3597F321FB8F46879F45134D0D415B9B893BBB7C12405043710686E8C90FDBF4212B0F32A2BF8AC712E6DE14AFEC69D8D49CBE38277200438555CEE
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles.js
Preview:	.............z.F.(.*....f.".e.P..".'.)g....&...h,Z"p..~...W....4@P.Yn.X....[um]]}.'..e,....h..qds........n.......I..ZV..."...:T..x..\|(~.2..m.....(.j......=.2.vS.7A4.o...m...+?.....)..C..f. u...<..,...,...[..m=..}.<....n.H...._.;e.s.,..h.N.SFO.0...0........\|.`.....Y_.@.{.~..X~C.....$...:.(....s9...X.m}c9.l..7.aw..g.y........._.......-.y.v.^.{.......;....Ie..%.i.M...1...w..........Vf.T.v.].&._3P,.z..$.<Zf.A.n;...h.T[..}.......\.0.V.(.0..1..2.....rx3g.3.%F .u.(..?...,.l.;..2?Y.k.,...6.n.8..K.._..^..>....<.....Wo/<.......h....2K.. ZZl_._...._Q.....y.qt....w../..\|......_.{.e._g."..N.~.....,.?......h...._.`.?.p...:.}m..w......O.o/...Z...h....j......W58yT......f..2..y....o....:..\.z..~.p.....o`..L.xI..s.....z.q............_......{.~.Vf......iv9[......s..AX.oj..?."...f..3...eT.k9........>.%....it ...u0.F..z.. .3c....k?...._Z..(#a<..}.^.{I........D...k...d.v.j...TQ..0... .#$7_.fd.."ZV...m,e3.x....(...q...#..M$.)O(E<..k...g.P.....Q.....O.8.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3785399365866252566&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1837
Entropy (8bit):	7.350999106477808
Encrypted:	false
SSDEEP:	48:lqQNn2qDlgxJ3xRPMgKjw/x7udB+9A3Laoer7+YH23:oY2olgJRPAw/x7qVGoJYg
MD5:	339A7F37EB8527F719DF1BA12D2CEFB1
SHA1:	D73B5156E2F6AC0A8C82E235BE758CB9D105B18C
SHA-256:	3A8FC37ED708C8E7D7DBD4D86F5B68A8B1DF9BA0B651DC97D74AC7D26D307DF1
SHA-512:	20CC544DE6A40C2AB6F77F8ABF6C2FFAA67D48028248FF557F236AD38B4C78D5920F0B7C81424334DDCDCB309E435432B77559DCF939F0D88C3635C0AA1F09D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4...4......x......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:B954E383F32311E39A81E3BCD8F08007" xmpMM:DocumentID="xmp.did:B954E384F32311E39A81E3BCD8F08007"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B954E381F32311E39A81E3BCD8F08007" stRef:documentID="xmp.did:B954E382F32311E39A81E3BCD8F08007"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.4......IDATx...KTQ..c. :..@....[.).f.P.E..r ..........P[.0...D+...\..j.6..B6='.........7..!\.y.y9..;.$...T....

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUk4lmfpse:eBse
MD5:	377D257F2D2E294916143C069141C1C5
SHA1:	B7CAE69682CF31DD670B65088DB8395ACDA6ED3E
SHA-256:	AC8778041FDB7F2E08CEB574C9A766247EA26F1A7D90FA854C4EFCF4B361A957
SHA-512:	01211111688DC2007519FF56603FBE345D057337B911C829AAEE97B8D02E7D885E7A2C2D51730F54A04AEBC1821897C8041F15E216F1C973ED313087FA91A3FB
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690137%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6003
Entropy (8bit):	4.914016164219438
Encrypted:	false
SSDEEP:	96:OpyIVC40wiJrgZCau+NpuBHxYa6Ay9ddmLxf6Xxe9jT+pjN9V3jJjeW1h4kF:QVluUZ9xNp46v9ddmLN6iWxJZiC
MD5:	C21EE5891BAA2F541972F0DCEE032CBC
SHA1:	B107AEC8AC54E6ABE58425273E366F93333E39C8
SHA-256:	2972458E0915ECD5F31DFDAD09C2F90F67D35076843FB98633660256ACC694FB
SHA-512:	8DD0772F3B043809C8A97556EC05301AF81188880BD6B9B5A9B9D51CCDA05957411E9E32D1151CE801D6FF7E8F3545A5863F81D6DB55060A71C418F2931B315F
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202301.2.0","OptanonDataJSON":"c4657020-c7d1-4a14-a091-267a7ee4863e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"8106461e-d91d-4359-ae6f-1fc360972fe2","Name":"EU, IE, Quebec","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","hu","se","mc","si","sk","mf","sm","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","ax","cz","pl","li","ro","nl"],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"de":"de","en-IE":"en-IE","sv":"sv","ru":"ru","en-US":"en-US","pt":"pt","it":"it","fr":"fr","es":"es","fr-CA":"fr-CA","zh":"zh","default":"en","ja":"ja","es-US":"es-US","pl":"pl","da":"da","tr":"tr","en-GB":"e

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16764
Entropy (8bit):	7.952763185601751
Encrypted:	false
SSDEEP:	384:bYu2uU1ax8RKL9xOtIaumdaR0TpjC2NmmPraxmoiqt:btj6K+eaOR0T8XmjPof
MD5:	B3938F5185F2565D9FC05CB6AB03F69C
SHA1:	C4268F88755CF5C67318580CBC648927F611B1D5
SHA-256:	94C10B70673C4622F6DE1B5284672D7E322418F92C247D578BA1F99B17B6E4BC
SHA-512:	6DEA5F40F87AF8FFC51A903CFC590AE5F46457CFF5EB24E32D2A344254C5223D9D9035475FA3E24B893C5FAF49166AA270B83A5E2B32F77C54A717390648CF06
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30305!3i18994!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=62813
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE....................................y~..........puz.........................................................NRV...........Z]a.........=..%^.w...ehlQ.i...'.E..J....z..]..8..o..r..l.C=.Z....-.A....@VIDATx....b......fCssw8.......+U....>w.t..$..e....RI...../J?.....%.V..k.'cK...;.G.Bg9.%....R4SJC'Y.=.T\|h.gc..S,V...E..b\|s...U........V.......1}...{.fE.)e5t!.~..V..I>...D.w.X..%MN%OP.I.Kf..l..u.q1.Az..Te.j...NW3.....r..^J.>.l.D...^1.7sM.L4....g..vI.'..Zq!.V.'\@.".%...r....z..7...f....>..V\.s}.X..?W.<W...U/R"........z.X8...PJ..G.....pI..&#..h...&(.....V..Xz..L0..;Vo...]y./../..7V....;W..9.x,p.ih-...4O..X.Q.byu..\|m.L..BR.......8_=.`.VQ_C.......jery..~T.\|k...2..{*v.P ..XoX...H..BvcK4).nv.._...\|...^...j.2...JF.H.X._1...Z..Z.t...6....".#..n...}...I)..v'.:. ..f.a......9}_.f..?....a..a...:........@q.//W....;...........).....m..f..F.z.dMs....U...Ce\dc.K..).....@......B~.+6.......Y.-%..Z....x..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 477188
Category:	downloaded
Size (bytes):	146401
Entropy (8bit):	7.997622074963662
Encrypted:	true
SSDEEP:	3072:r/W1rvJudp6bgTLeljeUzCrRzVkiYHkOgCkUyo2axeJzrTZ4wi9qSbG:rsgSgTL1UzCrtVktH1kUMlJ3Tfi9g
MD5:	F98285E1B2933ABC462A422D738BAB6A
SHA1:	FB65E6C5836B0308B010799DC2ECDD80F55FA918
SHA-256:	82983FD02F97F814317B211D5FFDADA47D4016FF28103B101087B07A6CEE1E69
SHA-512:	E5626E6D2DF878A3A74242BEC0DDDD1053C7C198A65D32EFF6B9DFCF934C3570792711DECDD218E3A66125D842BBBFBBA643CB25A659E233A7BA8DD65775615F
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/site/main.js?buildTime=1657307797
Preview:	............{..6......2.:.E..$M(3..q.d.i....V....d..I....g...@......L.x...`^...e:-.,u.....2...Yv;v...$.......{.L.;.CUC+s.?.Z...O.?...<......&"....v.[-.b<......o.],..n.X$w...!.....OZq..!............^G...m.-D^.u.Q....x.J..I...f..K.$....q".......y.z\4]&..{.Z4.O.M....\..<m.n..l...8\.C.....f.."....x\N<Y....."..B..p%...gA.'Y4..`.%.....c.Ti?..g.4.r...B..sl.&I....l)6..}..V.1.^......y+L..rco#.>J...z...l...i....D.c...Yt.st#\.ZD3...E.}.........<^..7,.8.S.Oe...c$....u.....e9.<...K.<.E..a.]........Atyx.......~/...../.9..0p...N..f....M.....E.f..(p...>z.............~._.........8.?.L.......A.\><zp4.........x4./..........................3x0.....x\|....Gbv..}..(p.y$.....\|.....G....t./.a.KF..g..3.@..7!`Aw......\.A.7...]1...".Ew...~/z...i.B.>==}~vz.....m.2...Z............0v..B..........3]BJ..{!..;.....O................Ld....(....[u$......s..8v....C..Z.H..x_=..@B.[wY&...^7T.......YR..i..x2lH.+<5..lzn5=.R./..1..q.Pk.q......./.Z..K..V..Z?mj.tW._l]...C,.F.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16222
Entropy (8bit):	7.964738353869957
Encrypted:	false
SSDEEP:	384:Ue+DlEforuY9hHoBaISQyxdqkOsZWN8iZJ8IhebHPxOqIdpk:Ueaprl9hHoydpE3MpOFfk
MD5:	1F2995002A6F55E72EAAEA37D30E9657
SHA1:	14D55405B6C5DD86A57FE48B7E8639F0110DCB53
SHA-256:	58BDB19F6AA3C33330F88F4EA13A698BFF29273DB3EA42B6E457A527A48D315C
SHA-512:	8F02F23DFD39BDFA4C7032370B2C0E061E513276380BC16BA2AEF134117EC7526B7AA8C5A6B8BDD24EA0CD57F8C67CBDA84DB0EE20D02E3C672D2DE463810DBA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................#PLTE.......................................puz...................y~......................................................'.E......5.Q..n.........\|.......8Q.i..NRVC.]...................................J.....]...........o.....8.......Z]a.....f...ehl..A../..%8x....j..l.C4.S...=.Z..@ ..=.IDATx....z.L.6..Ef..l'v8.....<..........,93.[;u.L2.d.....f.M.$....%).....<.UE..E.ee^..m...u..D.`\|.n....W[[[..2/!.^o..y.5...__1.....k.x\...~z\Ig.r..0nY.8.).9.!V.}....vNS#.o.+.O..C.{..~..<}g^N/`.......C.p.Tg.+..ZA.)".]...5......,....".m&.<.v.o}........S........j}FF....,N......X.T&.r..Kw.[.}Sk....y9..'2....g).......l.--._.M.a.\.D6......=C.q"...v3.%TR.F......v......07...u.BT...B......Z,..sb.-.v..C....t.......??0..V...2.j...y.v:...I1.../jLQ...MN`.$...._....c.:......:w@"RQ-.:d.lvS.X)..YM.x9w......~...........M.z..0~..LH0...s)v....k'.F.d.v~.\|9.8..D5~.li.........6 ......tkk..$.sQ`T.....Y:.q..l.*.......,.f.t.l=.U..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 52916
Category:	downloaded
Size (bytes):	20994
Entropy (8bit):	7.988999761676114
Encrypted:	false
SSDEEP:	384:tC7niyi/By45+9iBV538WjAC8jNe8qUo4DdsmPMb7lV2bzOAZo1Csk/r:wrfi/BNY9iR80AC8jNdBsJb7A6Woe
MD5:	87E8230A9CA3F0C5CCFA56F70276E2F2
SHA1:	EB116C8FD20CB2F85B7A942C7DAE3B0ED6D27FE7
SHA-256:	E18D7214E7D3D47D913C0436F5308B9296CA3C6CD34059BF9CBF03126BAFAFE9
SHA-512:	37690A81A9E48B157298080746AA94289A4C721C762B826329E70B41BA475BB0261D048F9AB8E7301E43305C5EBF53246C20DA8CD001130BF156E8B3BD38B9B8
Malicious:	false
Reputation:	low
URL:	http://www.google-analytics.com/analytics.js
Preview:	............{W..7.?..xw..F..(m..,J)..h...(K..K.I.K....~.7.l9.}.~.s.j...ei4....o.................l......No8......@.n..G..`X\zp.....w.Xu.j. Q.Q..V.....[ju.XZz...[..t.Q.=.L.....0}..Qp'CY..;.......q..z..}.O&...F.../.G.}.k<...F.....M&......A....xN...Q....'xc....AP.l.d..N...0.jq.....]...G...7.a..[CQ.......U.i.~.t..p ".%.T......B.DuY....:P... ..}......y..r....7o.?<......../_.}...@.3..]....?(x......'O..^x.kY......]]J.#./i..1./..I6V=.+zS..........W..v..;....Wu.....~6<....G..#5..WA0j.z.....z.w.....4.......v..@...E.Z..:5.^N..`2......O&4.....f.U...Z.D.~K.h...f .......n.....W.......4.bc..a.......I..sj...........\Y.,MZ........nmoo....O.A.L........N..';.....a..L.........n..pg0......E,g..}.\Y...A6.9..i.Q...j.o`g..S.g.....u. .....a........4.#t6.;.O..#4.....";...........p.?C9...-...........i.?..k?.Z...F...6....7i..AeR.QY........<...v......=...J..[v....T...\.B..K..^.#.!.......G.s..W.....nq.{.C......Ws}7.nq4..G*9...++...n_...G

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	4.778400246799109
Encrypted:	false
SSDEEP:	12:jWlvfNWIoj1Lq6ZFOATu61f4eQWVYvKWiYXeOcWRHddG:aEIoj1JFOE1f4+HRY1HddG
MD5:	8EE775801179E9B10599E53C07E9A0CF
SHA1:	5F7B4EAC19E5E1D7DF47196EAFB0AE707164E691
SHA-256:	280BD2185118544D1777AEC588FF0394A8ABAE3E82EFDF74A26EF0A2B83D84E3
SHA-512:	123B07DD8088CCDBF054F4915402CD9D0054385D75AB4EAB916AB2451630C800CF33BC122D18F032E3AACFAD75122FBB44DD0EB13F5AC14A7211C9D11455B198
Malicious:	false
Reputation:	low
URL:	https://martech-production-c.squarecdn.com/send-post-request.js
Preview:	// eslint-disable-next-line no-unused-vars.function sendPostRequest(data, endpoint, bearerToken) {. const xhr = new XMLHttpRequest();. const stringifiedData = JSON.stringify(data);.. xhr.open('POST', endpoint);. xhr.setRequestHeader('Content-Type', 'application/json');.. xhr.setRequestHeader('Authorization', 'Bearer ' + bearerToken);.. xhr.send(stringifiedData);.. xhr.onload = function () {. if (xhr.status.toString()[0] !== '2') {. const errorMessage = xhr.status + '> ' + xhr.statusText;. console.error(errorMessage);. }. };.}.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://cnv.event.prod.bidr.io/log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 991
Category:	downloaded
Size (bytes):	465
Entropy (8bit):	7.588028793512717
Encrypted:	false
SSDEEP:	12:XQf8YPsE+leoV81SzBbxQHtiaTA3GpXu/dV:XQ5sEy3VZ+tiak4XKdV
MD5:	0A676DBD2BC3021EB0F5FAF4398CE836
SHA1:	E3E8A58D546A8E2EA9F2F30C295A222E65D565FD
SHA-256:	EB8D365D19EC8AF89EA55B8C98B18C42776533EBE5A34B3402DB83A7BF9AC6B7
SHA-512:	CC9A8EC817BF0E5090AD7451B058353D90311B55DCECB421170F6DBA10DE876731E88A0DC039A633E2B518D44C9B96616FEB87D81010ADDA0493298DD8331EDB
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/images/public-web-styles/ui/close.svg
Preview:	..........uS.R.0...+T.....8.\|.......&.ra...nE.CA.YNw..r./.x.=.....r....%..}.1).R..O.....F....b...\|...~...q'...0..y..F.<......e..+k.Bg....}...[e......#_w.J.].K.O"a..>H..p..g.."R.'..U.._.Z....j......M.4x....p...h.....`..C3Cf.s,.X....o:....F....B.)[aG.W.A...o.D....Vzve3....fo..........:.;.u....b=.u.}k....)l.`.`......q!./...aBE.D.E3...-K......;4..+..=.........g..=.DmZ.&P)1E.8.2.#[...`A}b..\./aQ.jVU......AH.1._.?.....w...nrQ....

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	325247
Entropy (8bit):	5.459060678345054
Encrypted:	false
SSDEEP:	6144:57nC57+c1NB16wrwR/PVTtnALVMcHrq8Ko0kCiNvumiuuZQ89XLVzpP:5MZB/qxAecHrq8KnkCiNvumiuuZQw
MD5:	C7E839AA3D35BB6E11725E763A7BD227
SHA1:	928FAAD78A69922F02FC81B86F62918D769E900B
SHA-256:	861CC767205885603B24D4E2941D0CF01C8AAB16A85D97EBB98698A0416F3E91
SHA-512:	2F67818FAB1A256AFEFAC2A9FEEB1603D54299AFA208F897D045AC1C7756043BA90ABDC879D5BAD9EA8E3BA8990E735A3F3DAFC800A1424A01426E4C25D6FF04
Malicious:	false
Reputation:	low
URL:	https://cdn-pci.optimizely.com/js/8447815042.js
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={7584:function(n,t,e){var i;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendor",h="version",p="architecture",g="console",m="mobile",_="tablet",w="smarttv",y="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Firefox",R="Google",k="Huawei",N="LG",D="Microsoft",C="Motorola",O="Opera",x="Samsung",P="Sharp",M="Sony",L="Xiaomi",V="Zebra",U="Facebook",F=function(n){for(var t={},e=0;e<n.length;e++)t[n[e].toUpperCase()]=n[e];return t},z=function(n,t){return typeof n===s&&-1!==j(t).indexOf(j(n))},j=function(n){return n.toLowerCase()},G=function(n,t){if(typeof n===s)return n=n.replace(/^\s\s*/,""),typeof t===u?n:n.substring(0,350)},B=function(n,t){for(var e,i,r,u,s,f,l=0;l<t.length&&!s;){var d=t[l],v=t[l+1];for(e=i=0;e<d.length&&!s&&d[e];)if(s=d[e++].exec(n))for(r=0;r<v.length;r++)f=s[++i],typeof(u=v[r])==

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	997
Entropy (8bit):	5.023080424153227
Encrypted:	false
SSDEEP:	24:t4141kGOn6iHcuP4cQukfQxFf6izHcXA4mhMADPfy/B+:CZn62Igf6yFpfy/B+
MD5:	7850D784C53CDA239A9BE34372B242E6
SHA1:	988F8FD493FA61F1402A0C7EBEEFF6A438569C80
SHA-256:	7A10379A971BA3EDD630D99A643395A32574B5BCAC84B260659D804A46AA74A2
SHA-512:	EFDF7EE90453BB74A34831B5ABF0E4F0A2CB71A8150BF56837E5D31ED0E998CD1AABAE91186B2A1067405A2D0E795C8BD8B2F768158190C1DFB59FCDEE30C3E0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112">. <defs>. <clipPath id="a">. <path fill="none" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/>. </clipPath>. </defs>. <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78 11.78v13.6h0-25.37 0v-13.6a11.78 11.78 0 0111.77-11.78z" stroke-miterlimit="10" stroke-width="9.48" stroke="#a4a7ab" fill="none"/>. <g clip-path="url(#a)">. <path fill="#90c3ff" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/>. <path d="M80.28 10.59h23.26v23.26H87.32a7 7 0 01-7-7V10.59h-.04z" fill="#1876f2"/>. <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78 11.78v13.6h0-25.37 0v-13.6a11.78 11.78 0 0111.77-11.78z" stroke="#fff" stroke-miterlimit="10" stroke-width="9.48" fill="none"/>. </g>. <rect x="10.54" y="58.29" width="57.83" height="42.76" rx="4.41" fill="#64676b"/>. <circle cx="39.45" cy="75.25" r="6.3"/>. <path d="M36.62 73.73h5.67v12.48a2.63 2.63 0 01-2.63 2.63h-.41a2.63 2.63 0 01-2.63-2.63V73.73z"/>.</svg>.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119
Preview:	{}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	314468
Entropy (8bit):	5.602104467714734
Encrypted:	false
SSDEEP:	6144:74CQX5NzJFYLceF+qKXjXP9RIMbII5Y0Sp:MC+xJMNLRp
MD5:	54906D25B098716B3462741491456828
SHA1:	20A2D9F0F906D880D5D87326E77973D6A53D7894
SHA-256:	998EA98BC1A461767B9E1994F287BF979675A3365CFC20F31D9159D5BDF1B5F4
SHA-512:	D7D220CF98BE0F3D6D18F140B3880A8074EE6D0F59F61ABA1C2AFA6F46BC917179CE76C66DD912028E008476A58444A6F7A7D9268E6D7BFD08BA03EEAB3CA4DC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-65K13HQ4KD&l=martechJsDataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_referral_exclusion","priority":15,"vtp_includeConditions":["list","squareup\\.com","squareinstallments\\.com","square\\.site","square\\.com","workwithsquare\\.com","\\\\.local","cash\\.app","squareunboxed\\.com","cash\\.me","squareunboxed\\.com","tagassistant\\.google\\.com","sellercommunity\\.com","\\.\\weebly\\.com","squareup\\.\\*","square\\.online","weebly\\.com","trycaviar\\.com","sqap\\.pt"],"tag_id":15},{"function":"__ogt_dma","priority":15,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.280052635092167
Encrypted:	false
SSDEEP:	6:6v/lhPfOSaRquXhkrTLI8SY0LHD5AE5hJQ2cheVp:6v/7eSaDik8SY0DD5AoJtcO
MD5:	388940C42991EFD9EB33F133E3280696
SHA1:	C6B4C460D1CCB5833DEB7844423C54C5F2CD2394
SHA-256:	D65F4B2E8EEE94DDC7F762D098DE19558D879A3B597C8913B4D075532E3ED4B4
SHA-512:	5E103C4E4FAC6343E7A133DC80970C98D5B843BDCA4C5E613F9CAAA5BD295C272E7D3EDA1937FB553CB91111497A25B33DC8B8AA80157D49E92BB70BA5F8F476
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...`PLTE................................................................................................\|%......tRNS.....!.\4....v..2...)....~....CI}....[IDATx..G..0.DQ............Ydv.!.}/j..9..b@.....u.........3.....40..n`q...^.\9.qH..~..._..H<.\|.....IEND.B`.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 931
Category:	dropped
Size (bytes):	382
Entropy (8bit):	7.448173118564277
Encrypted:	false
SSDEEP:	6:XtlqRHy/71Fmnh+5c/wYSBUJuVqS+Y8WH6zJ8KWvpWCrvzEZ8yyKfD3U93Wj2m/n:XnuS/JF+UcDuUJuVqNYAKBZr7EZ8XKYW
MD5:	08DC65281C3DB6670B9435F5EACF9CA6
SHA1:	C5E20DECD47C1EB8B1A859B4DEA05F9718C8428A
SHA-256:	0639DA6C79900ABDC6F5BD27479E94B5CBC8DAC25B2C9E5317F66AD8F34A61E9
SHA-512:	2D07EC71A50047994BE8FDA34A22D27CD18F496BC8C8EA376E0EBEC857D97AAAFF1F3C9435E24149A9C1049712CB2983729BF387EB53321CB91D5FD039845D85
Malicious:	false
Reputation:	low
Preview:	...........]O.0....+..F...%.9a...+...B...T ....{Z.....7....9.}Bb.9.^tiR\X[/..m[..j.@0.....d{Wu)f..8...V.m.b7-......B.V...&.+YZ..)6.K.l...r..quS..F6.u..O..H.:.f..0Ds*....Y/N...7c..U.......k.. .v......_.^..E.~.(......^c......:..:(.aw...^..5Fp..aL#.Gk>....#....B..C...._.0A.p..S..R..5$.T...X....R....o.....?..w&....0.......w.p..q.h.i.....!..l.g..3_..9a....z..;A......

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 39243
Category:	downloaded
Size (bytes):	11214
Entropy (8bit):	7.980660611226627
Encrypted:	false
SSDEEP:	192:8hrg3oYWnxKUgzCi0SeLJHs+R+lfgJ3TNBrSuWtlnlavH2syP1ouLksJAD:8hrgYYWnxKTQXYlfgd5gzavVymu4L
MD5:	C4D61FBB6E730A840C7F140CBB9BCD06
SHA1:	E424F981EEF8F250C3C7E0D4B60CF4E39424FC4A
SHA-256:	37D6272EA625E9FEAAD12822FF9099767915BB0DBB4019700E8EABAA95617AFF
SHA-512:	FB3D361F61356EB2DA3A7D9B871973BD081A8A100593DA0047D184817B34273DBBC878319141D7B52CA3C5C962F3F56765D15591A3186EDCED239D316DE7FE09
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8......k]....<.l.XJ..P..+.8.....%.....w?.T..t...kzzF..d.;....P..G..N ....&...X...w;,8."H....8..B....q...u2fR,:Z..U...`zP..\|%`+.#\m...+..PU....qa..na...9..[)y%..V.ga.X.u'p...t[.kk.....a.. {K.-M"...?.A.G.z......#..su.s.............f.j[.D..1.m95.I ..P.....3!.,..X.c....^...jLl]..l.u.O..#.]..V[o.z;B..T...<x..2..8...Ml'..:......Q7.e...7Ec.I(n.x.V.......D.H$(.F9.&z....."{.XTY..5..C...y.wg...?.Yd....i{...JC...'.ZD..j....{.....b=#..q..B-...\|4....+..cg.....6.Z.;...l.v..c9...\|r..3-..S...w.\|.#.H.{)T......T.ah?..M.e.....C...S.w6...4=..&s][j..[.y.<.c.;.D.r...-...........J...v.6_._-.p.....s...>\|.N.......\|...u.\|..-.h.@....R_.A....4..i..D2._......j..O...`6u....v.M..i.Rk.}.H...v.\0.,...QI.I.. .u.....-....3;.>..a..a..*...V,..:........rW.Q..W..f.......J..p.Z`.r.VC.&..8X.LXf...4r......L.uf751......$...-"...[D.....Z...8.c/0.Y.h.f... .9.......,B.?.V.L...?U.S]@$~....y.g...DA."a`.q.-....M.<z.>.cA...........5.3..&..l.G...%]K...^..Q;.#.N.EB.tJ

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	411376
Entropy (8bit):	5.33220948930278
Encrypted:	false
SSDEEP:	6144:YcmucaJopx2dry98QZ7i4Ne5EmJ105j9nUsZ0AWEXR:Lwpx2lAj9HZR
MD5:	B67EDB9803C62210BE356F797D79D131
SHA1:	B634C88DC4E149EB1B14D2944D76C28AF8730ADC
SHA-256:	0FA90C9E195798597245F53E9DC98259304276626836677FFAF0F9FA18F9A189
SHA-512:	D91281341A5F1F2EF76BD3DCEE7717E7670E3DCB29918832E78F63A0623EC068DBC531F2C6E0C7D059408B0EF9FFF9A9EA5A84FB0E8C446EA569FA8600667F4A
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202301.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202301.2.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var o in t)t.hasOwnProperty(o)&&(e[o]=t[o])})(e,t)};function e(e,t){function o(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var k,t,o,r,i=function(){return(i=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(i,s,a,l){return new(a=a\|\|Promise)(function(e,t){function o(e){try{r(l.next(e))}catch(e){t(e)}}function n(e){try{r(l.throw(e))}catch(e){t(e)}}function r(t){t.done?e(t.value):new a(function(e){e(t.value)}).then(o,n)}r((l=l.apply(i,s\|\|[])).next())})}function g(o,n){var r,i,s,e,a={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]}

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	4.778400246799109
Encrypted:	false
SSDEEP:	12:jWlvfNWIoj1Lq6ZFOATu61f4eQWVYvKWiYXeOcWRHddG:aEIoj1JFOE1f4+HRY1HddG
MD5:	8EE775801179E9B10599E53C07E9A0CF
SHA1:	5F7B4EAC19E5E1D7DF47196EAFB0AE707164E691
SHA-256:	280BD2185118544D1777AEC588FF0394A8ABAE3E82EFDF74A26EF0A2B83D84E3
SHA-512:	123B07DD8088CCDBF054F4915402CD9D0054385D75AB4EAB916AB2451630C800CF33BC122D18F032E3AACFAD75122FBB44DD0EB13F5AC14A7211C9D11455B198
Malicious:	false
Reputation:	low
URL:	https://martech-production-c.squarecdn.com/send-post-request.js
Preview:	// eslint-disable-next-line no-unused-vars.function sendPostRequest(data, endpoint, bearerToken) {. const xhr = new XMLHttpRequest();. const stringifiedData = JSON.stringify(data);.. xhr.open('POST', endpoint);. xhr.setRequestHeader('Content-Type', 'application/json');.. xhr.setRequestHeader('Authorization', 'Bearer ' + bearerToken);.. xhr.send(stringifiedData);.. xhr.onload = function () {. if (xhr.status.toString()[0] !== '2') {. const errorMessage = xhr.status + '> ' + xhr.statusText;. console.error(errorMessage);. }. };.}.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_click&page_click_action=Signup&page_click_description=Visited%20Onboarding&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047148992
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1371)
Category:	downloaded
Size (bytes):	1571
Entropy (8bit):	5.315493905410443
Encrypted:	false
SSDEEP:	48:Cs7lNO5lhY8gY/r3YZtJUCRG5IfRuvItXnh+W:5PeDf0luveR+W
MD5:	35CC233F894E995F79C469229F42FF31
SHA1:	0731F559AF00F82EEBE1297BB6BBEED5889100F2
SHA-256:	200A359F0489BDA767AF63764CA362DE52502F1B0D16BE5EA35B2D2F2EBC4F57
SHA-512:	F778E90268A53DB6F61E4B54BD000B0756D2ABD34D6C504B0FC5BE3C2FDA425E47EA3C3C83A2F635C0A2AF014117B0A3BBDE13DA78CA44EC7A2711F79B7C5950
Malicious:	false
Reputation:	low
URL:	https://a8447815042.cdn-pci.optimizely.com/client_storage/a8447815042.html
Preview:	.<script>..var allowedOrigins = [["^squareup\\.com$", ""], ["^connect\\.squareup\\.com$", ""], ["^app\\.squareup\\.com$", ""], ["^capital\\.squareup\\.com$", ""]];.var blockedOrigins = [];..!function(){"use strict";var d,l,r,c;try{d=window.localStorage}catch(e){l=e}function u(e){return!c\|\|0!==e.indexOf(c.origin)}function v(e,i){return new RegExp(i[0],i[1]).test(e)}function p(e){if(!r){var i={id:"iframeerror",type:"ERROR",response:"Error accessing localStorage: "+(r=e?e.toString():"Localstorage is undefined")};0,event.source.postMessage(JSON.stringify(i),event.origin)}}window.addEventListener("message",function(e){var i,r,t,n,o,s=!1;for(o=0;o<allowedOrigins.length;o++)if(v(e.origin,allowedOrigins[o])){s=!0;break}if(s)for(o=0;o<blockedOrigins.length;o++)if(v(e.origin,blockedOrigins[o])){0,s=!1;break}if(s){c=e;try{i=JSON.parse(e.data)}catch(e){return void 0}if(t=e.origin+"_"+i.key,!d)return p(l);if("GET"===i.type)r=d.getItem(t);else if("PUT"===i.type)try{r=d.setItem(t,i.value)}catch(e){re

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 401 x 387, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	165660
Entropy (8bit):	7.989708552287887
Encrypted:	false
SSDEEP:	3072:Vk08kwFrPYAkOzL0RSJV53iTsrM3adKLKM/3rWLkS8fb1Gn:VkRPrPYA9nNV53iTsAqdKLKs3hhT1Gn
MD5:	7547236310EABEF905F40EED8A1A5997
SHA1:	C0CF8ED3AE56E4BB0CE3CDC3C08385054AC9CEC0
SHA-256:	D81371654521767E6BA8A9739633A1897D401E6982378A689C403E02B3E31240
SHA-512:	89BDF0FBA86F569346BAFE9856C9296F32D4FB398F5CCCE378144B0FE799F45729CA918A59B2B1ED1ED1F4581BB4E286A87E754CA00F4EA1A47351F6E27876E7
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/savita_orig.png
Preview:	.PNG........IHDR..............?-.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........o.d....orNT..w.....IDATx...W.-Y........o_]3=.c.c0......."..P0H.BOz.^.Bb...^..R.H@.I.......L..X.....Uuo]..9.l..k-=.\.3s.}.5e..wc..d....s......?.uGC...O,..!.1...{.8...:....L.....?[.......yx..x.1...Y.1......;.2..\|.x<f>...g.[^J...!T.{......cK).Z..B.......@)...F..,>w..~.X{\'...Pk..0.k.......J.\.}..z...4.w.a.-..TD...,...x.1..X.j..9K.;.6.~.n...b.T.#,.W.Vr.uY.^R....M..\.V.[...k..k..1Xk..f8..N.K....H...T..(M%s..$gr&?"..b.)..HP..E..I...'...@..}S)-..t...=.......D....?..Ng......!.x.p.........DV/....\|...\|..._../..>lK.8........!..8..4..t..\1.6B(.(...XPU.ex.j.i.].(..E.......U.^.C.+k.&cqX@....%%..7U....lz*.!.{,..c%...+s........9.3y..QRz.c.X....7..:....].....$......J..iH..}.<....+l.5.w3!...pA=...O..~...a..y.zduo.......9.3y...Z....+,.BQ:g.......p.?<..a.......q...:&Yv...)+.....\|........H3Gr....q<.zU.n...#D...5[...

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1503
Entropy (8bit):	7.049556875299597
Encrypted:	false
SSDEEP:	24:o1he91Wwjx82lY2T3o5VxR4VY7ka4Vb2yJ3VF4Vh7ks4V/GvdDna9x3fV+ApDykn:mqQNn2qb+X3BJ3kWR/ehaDMApekoHBPs
MD5:	BF44746166051D064F5A2DB87A22C628
SHA1:	9A423C1458626A74F4468DB69F3452FF99FB8477
SHA-256:	835ADFD60E0AE3BA5027587907BB88E735C33324E484F07EA0BC9B257C2917FD
SHA-512:	452100A287FAF60F377B6498B904A856192784EAADF2A420E9CEE51B919F7CBB333BEDF6D41E1F7CC2FE5DD89DA8101BC5A0E6B8DF946C70F5F6FB44D45F4E3C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B.........tKJ.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:258E7E61FA2011E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:258E7E62FA2011E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:258E7E5FFA2011E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:258E7E60FA2011E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1./0...QIDATx..1k.@... .g....b.;..R.nB...n.......NB..N.....K\.7..3:....5.....~.b...w..r.].q.q n..T...5....M...R$.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/630646945?random=1714104722926&cv=11&fst=1714104722926&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28597
Category:	downloaded
Size (bytes):	7097
Entropy (8bit):	7.973301673825605
Encrypted:	false
SSDEEP:	192:EiaBHlPz1Zc3Bsw+JItjE0Q1/7h7sx78y8:6Bdz1iR9UGm/dq78h
MD5:	83E6678B2B1589BB32812F06910CCB1D
SHA1:	F73C33B1209993B55406C05F616072FF38EF54DA
SHA-256:	45A3269F949B5095F1641B76C9054B4DBBE55CE42286D2E8C5BA97D7CA2F8849
SHA-512:	94FAD6E3CFA8D1B985758582394BFC6B6F3DFF16143A1D0777059602531F43CC621C1BC296DDD4C7BB13FA1278C313F7E5056672BE3E960D4DBB86E60A7D6161
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/about-us.html
Preview:	...........=ks.8.......^(O..e.zx.q<..$....8..HHBL..AZ.:...../...8s.........F......./.^......}.;.?..tXbN.xwg0c..;...6;>..a@..R%/\|...a.r..c3:.6.h.].\0...lPW..s.P.....`9,.....9t.J.t..9...........dG)\..E.....=D.......Cx....Pk..Y$t,.`......%.C...%.3..)..%a^r....#..C.S..+..6..M&....&....??;jo..........d..~.d....5^..:..Y.v.V......4.Y.x.z}.X.<.x....k4....RK..F.]?.7..v.S.{.....}.E].....)J....j....(...>..fX:UH..K/=..}...OL..`.0.&..RL..t...s. .t..`6...YU.T.wx..]..Z6l...9..$.` `.h.6w......uuL...`...3{X..b..t....LS.z.\|6...u.rZ5.a0_"......E....q.m.......A.p......tO.m.'.1.c......F.&r...S.....L.'.g..R}.....`R&. .s...N...6....:.Hz`MsV...$".^......u.6....~..9...S.g...hT../.....o.....6..S..U .c1...j,F4....z..4..zT....^u.[Slc6..)R...T'..0...e]....c.=b..p.>...=.....5P2+4...v...Uj....w..R.O\.^.pf[0s...Ga.QUho....Zo.....Ag...%...Z.U.-6...f*...-........C.3C..^..v.F..:.].M.b.... j.0C..U!.........L. 'kS... ...?.>sC..Y`...sGR..O[.f..../O.^...F....h...Zo.7

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 45877
Category:	downloaded
Size (bytes):	10442
Entropy (8bit):	7.97869205882042
Encrypted:	false
SSDEEP:	192:5EkMMQZoiGg0U7wsczkvtqICNQaoCOHy7J4UD0viCmKEaS:CMQZoi17wx6t7C6a7m+KEaS
MD5:	B00AEE320C5CC95D559F53C406C334AF
SHA1:	3241E09331B78FA690A4EEF1F772C3ED2249B07F
SHA-256:	57640D402CB70858A6DD959042660C8AED128E326EFB1008C3C7248FF0471BCA
SHA-512:	455D44405E7FB5C1928CE36AFCD6E08CE8A2A0DD90645A53F47931C9141BDDB7424AD7910284FA4D10C2F426BE81ADEC4EE7BE7847F998EE810838A32916058F
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/health-professionals.html
Preview:	...........}yw.8....{.....H..-...q...w.Loo...HHbL..AZ......([..==.t[.q...B]......9:...).G..`}.....~Ix.......6\|..EN........PH...w%...#....;.{+.\|.N.#(.NEx.Xb..@.MD.Y......~......s.OD.Y..././......."<j(....eum!.......7q.....C.U2....`.?..X..../.[.......8....,..7P.M..Gb..?.!...bRggc.L^8....lg8.!..b[..`=...{6.L..%...........B..S.....:.L..LW.Q.....tZ...a..uh...F..>.e..h6:..F...... ......aK..ln..?...[.V..lw..4v:...v..x.?.........v.....?t...?..7.f...\?..;.+.;'d.......F.......lomow....:.v"?lL..... .f.S.<.l....ls.....5...f._B.?mt.?.B.D5;.....D..V{g.........Vs...vm.....a.?..A......C....Q..:.Zj...f.VM\|.....j.v6.....U.......P.h?....R.+j...#.8...S....@.Y..."'r.[..w.~..N i.).....>j~....c...:..EMF3..p.K..xI@s...$..q(...F..v...d.@.2X......~..k..b.ommnv.Z.m5...W..vc..x6.....-...t..+.....rh.........L.{.2t.Dc..wN....z.......=0=&.F....P.........G...#M.~..........f.Y..X.o.s..I.z$......U..././e...K....c..C.......=*0.u.^Wd...jR?z~T..~$.>...T..E........

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.1b7f3d0e.js", last modified: Tue Apr 23 21:28:13 2024, from Unix, original size modulo 2^32 70670
Category:	downloaded
Size (bytes):	23080
Entropy (8bit):	7.9913802967544
Encrypted:	true
SSDEEP:	384:d8oJAmWxXkqVzQi6rFUPfBrrQGvxQ/ZPV1FfSjA9xB7+q1MlkKiJZwM8DxftFy8b:KoKdXklBUXNsGvxQPMuxB7x1MlkKDMu7
MD5:	51780471BD680082C3977720B56DF64F
SHA1:	65CEBF33BB7DCD9D735E25CD3B83D846DB809FAB
SHA-256:	C7FB2D336F11F19DD6D39A97DE97857F56E733DF99A899FA7365201B333363B1
SHA-512:	CAB8885FED19182D2FF62BE9E46CF399E8A3527FC010721B04C0FB88CE0C929709C6B552B4BF6F09EA179F808B71B9648F46CDCFF0842E164F141EA2D9B95998
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Preview:	.....'(f..main.1b7f3d0e.js..\.o......b%...8.,.Hw3..[[..... Pl:..Py..,7.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;9...)^.$..:<.]..M..<\|.n]....x....lw.[_g.n...s9!.u...)s..&.sA+d.^.t.0.K..\|.....p...g...e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX..}...L....=....%..k\|..w.....v...Z...b.-q.^..K.>..JQ....L.....>.;..Y.q_....$.t.O.T.`Q=........h.e..X0...5A..X.....%.......a...K..,.d.f...^.(..+.K\s-4D....2....M.)e..5...R&).)..zP...@....V.F8.b....8J....37YR..p.....v\|.i.P.r3`jN}.l.3..7.3J_.z.+X.......H...O....#R+%....~.....N~...../.}..........G..Q.{G.............;P.8..,..qv..5.W.4.`...V7Y.p..^.e.}o...XY...o...~K.8>..Pr....{..tU.1....Dw./..o(.P.DA.j.+m.....:.f#VI......Q.W...I^.@..@./YVKk.Y..T\.k)...L..Z............'..X'V...2.r......w]..%...z.....sO.p...z+...0....Z;c..WQy...b.../.K..51.j<QB.Q....2.../...Y..[D.fc.DE..J...W....=..2.`.Ev.F.c'..G.H).j%U.9..)....W...u2....<t....B....K..I...7..Rg.....Pi.W.$WK`'..........z........j.....<...F.....$X

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 562x100, components 3
Category:	downloaded
Size (bytes):	17218
Entropy (8bit):	7.96412548974838
Encrypted:	false
SSDEEP:	384:uFL/vorTOPbExFDqchAAsvioVovMX7EVF7rBZS3UgrxY/iqLCYaT:uF7vo/sbEichAAUzV8GwRPS3Ugry/JLq
MD5:	369512FFF14FFF9FDF18A74F89A016FD
SHA1:	B1254DEE2D96BF54319322D6E8142D8F7A9E65D1
SHA-256:	A948C0A77C5C9A6711FD0D05CFCE0F7B8BA9F1EC100796A67C773CC3EEF923BF
SHA-512:	44B39A8F6309B7F6DDFC2EDAD305B41F1EF6DDB08BBE76DC67BF33DB5C49D2BC1665D73A88FA4DCF5B95B09BFBDA9CD27D901A54262E2042AD4A432A604D65DD
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/bprs-logo.jpg
Preview:	......JFIF.....................................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......d.2.............6..............................................................................._).B................_..l{>.=.9.V.K.=V.....b.;.v.2A.]N!...I.U..p..W..[w.<k6....=.Q.?..b..T.......................#.6.V.>.........8..v..w......q..{xsmW..B......\|\|.x92.7.l.<./..&.....Mp....15.&.M.i.I.......Z-.?i..9..D.@......V}....r.m.....t....................u....\|.a....&.M*.vVoE...w#..NK...)/W.../n.x^.U?A.....~.z..5..U....-_6-.LY..Ex.IZ..j.m..-..,..Kh..+.o...-L.'8..j.....[................;.j..:....N:Nf.otS..o......g...q...4..`M...7{..mA.#.........>....9...?.{...6...%.....F........{6vmO#.Y...1J_9.{.k.R..=.".];;.Z..s.0..K.rY"...m.n.....pj...S....s.k8.\|.wA.l...u...U.{...~..S..].:6...U.u..7.l...u....z...C...A.=.Mmw< .....st.~.M...5..U.+4..,cv.F..L`...f;.}...3.z.i..0.uK.K.S%x.s...U3$.c...

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 204, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7943
Entropy (8bit):	7.8972813154207095
Encrypted:	false
SSDEEP:	192:TBa8jOJ9/7CR0dvA84M9Lsl3s/6+ZLU5xZAdYu7xSZJOCNzMT:o8jOJ9/7JsM9LsipZSxZAQmCaT
MD5:	7AB312BADE3F4932C54FAA3B0C0A7774
SHA1:	48FFDF73F510B58631882A6FA59D7E77146F16EB
SHA-256:	05F25790549EFCFA05946D41BDB49F34DD26774369DD364A26E3C08271CDE902
SHA-512:	B73588F01B89FFCF43DC252C13FA3430F6550437ADD8A86B2C9371C74FC01EA9971CCC1A4A2B0E20EA8246078324F9A5DC3B77F41F821B7249D35F031A36B532
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............wRf....PLTEGpL..............................................................................................................................................................................................................................................................................................................................5@T..........................................................................................................v..x....>>>....................................w.............................SSS......................x..w..v........................w. ..............555..................zzz.................................................w..w..............w..w..x.mmm.x..v..w........w.**....w........w..w..y..v.VVV.w.....w...w........w..........C.#.....tRNS.......f.>.....Z9............Hpc..w...$.PM...~_!......E.6...T..1BJ.W...s...kf@~i..,..r..4z...l.~............-k.........\....V...3Jh.@hw..,...9P.x...f.@.....~./a.6F

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.011396230736189
Encrypted:	false
SSDEEP:	3:YAoC+rAIiA0vL/ATzAW:YAoCpIb+ITcW
MD5:	85879C8031C63CC2BC471DC25F2D969C
SHA1:	E33BF2E205F485D8FC9A32BCEFB0770C8335D799
SHA-256:	5811BECFCEB9C687E1B7AF2CADDC84272B8B0790E418BC90414BC91505684B73
SHA-512:	793112BE109E3EF4057672BDAD9FF104A10CC89036B687CF5FDD87A60BBCCEB6A00A97664CED8922C55FF2892EFF027BDF14D4ECD8D4F7AA90BF8090A208E2C4
Malicious:	false
Reputation:	low
URL:	https://squareup.com/tracking.json
Preview:	{"employment_token":null,"merchant_token":null,"person_token":null,"unit_token":null}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	5.438575503507309
Encrypted:	false
SSDEEP:	6:U+4OUr940FFpFM+56ZRWHTizlpdUDUfPtxVk1nq:UJO6940FFMO6ZRoT6pSunq9q
MD5:	D1AC9F97E81F010A56C2709DFDB01F0C
SHA1:	B9D2DDB24CF04E0E44A7CF85CFF83AF3D860F2AC
SHA-256:	3FB3F4F18D94F4BCC3DBF87E16BD68982E85B46458A261F79C0E5C1852FD579E
SHA-512:	32FE953797D00B25C2249D928AD557D55481D5724439F88547486A8A407B8298A32177ED9091A78D0982CE4520BBEE07560C4FEA773B44ADCFFFB0A6E57DB036
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
Preview:	/. See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8ebc9802c116&v=v21) format('woff2');.}.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 832
Category:	dropped
Size (bytes):	449
Entropy (8bit):	7.417450953717127
Encrypted:	false
SSDEEP:	12:XwNFE+8BbICRwnkxcjYIjdH2lBxoVETkQpjB:XwNFybLRqkBKdH2lBxlTbpjB
MD5:	E58B413CFA1E5D5C0BBBED01743F7E11
SHA1:	D47845ADAF6408569D78265A29F060E40843EE79
SHA-256:	FDF49810CF924C023276F9B836F1BE03051E3294CC4AB2A4B36B08F633D15035
SHA-512:	B37FCA411C6A8957319317E5B5AC13581BCB639C1972284152A12B292E11CFE6889CDE09357F2181E2F3083719F7DD5D7F7821CDE47592DE67ABD610E560BC95
Malicious:	false
Reputation:	low
Preview:	..........mR.n.0...+n.M+.......)#..F..f.....al..0..^..d.dq.........D.K.R.:..P....R....F.6.J.S..,M..0j..j!..,.I..N.SB=...x.-F8H.)..iw.........y.s..f...Hu....q.,J.+./.F)..Jt........5.x........Vm^t-.2..............YQ..)..R.E..DnD.J.z..$.B......)S.,S..~\|.MO.7.>..(....YX..U6...>...d..P.,?.P.Q.mJ:..>..j.....j.{........*\.?.@,.b.........M..-..D.0.?..{7tn.wt...o&.f..+8.............j..\|..n.GE.EI..<7.?rx...9>....l.mm..}quV.D\..$.......h@...

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 46274
Category:	downloaded
Size (bytes):	17168
Entropy (8bit):	7.989364903563379
Encrypted:	false
SSDEEP:	384:MGx2krkLfYLu1yss2Hi3o0AkVAAdIa1pBz8OMD1:Px2k4LYi1pH4o0AkVj1z8OY1
MD5:	01D5892E6E243B52998310C2925B9F3A
SHA1:	58180151B6A6EE4AF73583A214B68EFB9E8844D4
SHA-256:	7E90EFB4620A78E8869796D256BCDDBDE90B853C8C15C5CC116CB11D3D17BC4D
SHA-512:	DE6CA9D539326C1D63A79E90A87D6A69676FC77A2955050B4C5299FAB12B87AF63C3D7F0789D10F4BE214E5C58D6271106A82944D276D5CA361B6D01F7A9F319
Malicious:	false
Reputation:	low
URL:	http://www.google-analytics.com/ga.js
Preview:	...........}k{........m..i...`.@.....-.G..4$MB.........b.qYk.s.w...#it..."..t ..p.....xq.....;..7l..C1.....B....Q.}....9>..d..&~.....~...=_Z...0.{...w'<..e../..L..A..J.w.R.Jy......XZ..<.......<."....K?.~.xx~..AM.....MF.n.{-/h.p...._[.G.O...........h....>.&...YT..A'.l.........vEY..%..xm4.\..q..0}.i.g.. -T.{txt...... .b....v.W........E.5.~i.O~.._.-.A.I{...kc9.s!....J.y.Z}..@..zA.........Z.....Wh.v..s......,h?Za.p..v......U.....6..n..xq...E...M........zSU..."HCC...i..T..f....g...lf.<k .@.....&n..'...../.+!....3.C...t<..p\...`F..C...t..t. C.RU/.)............_.4/(s........4.[. .........C...x+..A..x.k.i4.2.....5#s.1....m..[.].......6.N....X...dms.._...\...P.2.\|....a~..v...@`....t.-F.(.Fl....k..-...>...2....2T.......[...e....eB.s)...IP..~.q0.}...M.Y.p....\g..,...x..^...I.r.....R.a..x.rqI.H..O..Q...............kb,y*w...N.;J...p>.^..z....:....n B `.6....m...Q....L5.......W2.z^.h.).c...-...H\|.-aPK_0n.L..\|..b..uKv...6=/..6[.x.Dk.R.X..A.h.A.0. ...

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2791), with no line terminators
Category:	downloaded
Size (bytes):	2791
Entropy (8bit):	5.858498533264765
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08iybqHSFYc0Ck3R/7eG9nKh:wsbSUtJfxrqLWWWdV6j1uymHuQRn4
MD5:	41F314D63D90B2CA98FFC742E683289D
SHA1:	4B9157BEEF96139FD0C9943CF77A9B369F3954D7
SHA-256:	366BD3C56B000597912DD3E5C0018EF6914184D0829967C23EDBCA390849DB1D
SHA-512:	9020B8708B1AB08705F0210720BF49DA47ED74BAB97D7BA66F04D02E5202B8BC57C7CD5678F1EDD7CD738CC2D84DDE5CAF2135F591D060F6A3737B56ECCD1A6D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984344943/?random=1714104722646&cv=11&fst=1714104722646&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 204, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7943
Entropy (8bit):	7.8972813154207095
Encrypted:	false
SSDEEP:	192:TBa8jOJ9/7CR0dvA84M9Lsl3s/6+ZLU5xZAdYu7xSZJOCNzMT:o8jOJ9/7JsM9LsipZSxZAQmCaT
MD5:	7AB312BADE3F4932C54FAA3B0C0A7774
SHA1:	48FFDF73F510B58631882A6FA59D7E77146F16EB
SHA-256:	05F25790549EFCFA05946D41BDB49F34DD26774369DD364A26E3C08271CDE902
SHA-512:	B73588F01B89FFCF43DC252C13FA3430F6550437ADD8A86B2C9371C74FC01EA9971CCC1A4A2B0E20EA8246078324F9A5DC3B77F41F821B7249D35F031A36B532
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yy/r/cXapvT5eNtc.png
Preview:	.PNG........IHDR..............wRf....PLTEGpL..............................................................................................................................................................................................................................................................................................................................5@T..........................................................................................................v..x....>>>....................................w.............................SSS......................x..w..v........................w. ..............555..................zzz.................................................w..w..............w..w..x.mmm.x..v..w........w.**....w........w..w..y..v.VVV.w.....w...w........w..........C.#.....tRNS.......f.>.....Z9............Hpc..w...$.PM...~_!......E.6...T..1BJ.W...s...kf@~i..,..r..4z...l.~............-k.........\....V...3Jh.@hw..,...9P.x...f.@.....~./a.6F

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	downloaded
Size (bytes):	42893
Entropy (8bit):	7.914198451014249
Encrypted:	false
SSDEEP:	768:PagPE/dWyy1G21A5tz5w2GBNlaE7LzWM8IBpWHrhrxSvyJIxUS5VVFwIpF4:ibIyyR1A57srzWM88I9rovWcJV3pF4
MD5:	AB453727E730989896E3CC0A7614891C
SHA1:	28F32FEC2B12B3FFE50ED79F44D6E7E2CE0FFE31
SHA-256:	A844310F8B4FCFD980A79A4477F93D6A1B0312041952749888412410442D6F41
SHA-512:	46BB04996817E75C94263A0F251FA16B0580EF7742676178F03DE2F4C153C39A7D2C138380296B13EBA5BB8C3866B96D710D070A002D2F620CBA6B05DB16DEEE
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-3.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............7....................................................................S...........................................(T..............C.B\.6..2s.{ ..........,.5..............(....J.(......P.....@..*P....>>&..i....q.e.. hf.a.d..[..o.q.L.....".>@...F.....>7.V>.'........(

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	14060
Entropy (8bit):	7.934660494273198
Encrypted:	false
SSDEEP:	384:poLvKOStLynFTKicCOXVXRsGcPMBLTn81tKZlU:p6KXOTZcFXVX2GhnKMU
MD5:	927E3DA71595434CF3097022F8BB8C0F
SHA1:	35BDC870D581D9328CAD1B75E708E624C9134FAB
SHA-256:	83B55316A5058A7A0A5FDF638E3B0D733C87F98D38672E2F54FFBE6B88201CA2
SHA-512:	50BEC1A46711B22016270B0EAFC97C556C19134B1AFEC730D924C8F22D1BF9C916D1EB07497739AB38113EB35E448243F88CC5326389D32B6D6EF3917D73888D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz..............y~.................................................Tnz......................i.......{.....t.._w........... !$j....o..x..8x.XYZ..=.......J....%...^.w..z...s..g...f=.Z[.f...5.IDATx....b.:.-.033SYY......3....V...)J...[.$...U.l[.......Jo.....u,.O..R>..........o.}.k...9w2.._..q....J.#..\|B.....50.".wkal.......r....._..t....\..8._.....%...!\|.Du...A..=.~n...'...>.%.....W...AlW.\|.}.".........a-....b...K.Z..0..!.a.<..........=L.B..J.".o...........mq.q...z...uA,.Q.......9...Z.A...%..X.yu..OkX.....l.5.[YP .~...P.V....,.s..... /l.F...+...0.......+.Q....G...%.`y.)..8...?...D.~.A.).z..1....~....qv.&....)..6..0.1,.z.......`X...t...V.......-.."...x./{R2)..S.:..K.{......-.....c-l..{...V.$.....kN... .....G..@R!...e....rC..'.t........}.R.a.."J..$<.X.'......4..O.H..)....B.....@Rq.u.a....G.&...p.....H7.y....n.*.%..w~..p@G...@...

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20303)
Category:	downloaded
Size (bytes):	547361
Entropy (8bit):	5.431026201247079
Encrypted:	false
SSDEEP:	6144:+YS2IJf6PwG/wl4WbJLPGMZjC7W86QExWydtwv9bR/h5nFDuTU86x:+YGGoo6QExWyaRDuTU86x
MD5:	3DDA8DA4DFE9273BA481AE622BC4E882
SHA1:	A9EE62A4678E7344B3BC8589A37DBFBFB63C46EF
SHA-256:	0895FF026A043DD592056EAC47C4F27DDEE5621D9BF68B3992948B6753F28777
SHA-512:	C6DCBD2DE809341D34101D772D655BE1677F91E94FAF7F10CDB93BD011E2C93248B78DC148891D056723C29362D4F2D461AC75E1B00EEC71506D3E34B7785040
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iEpO4/yy/l/en_US/JEeFeYKiBmD.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5141), with no line terminators
Category:	downloaded
Size (bytes):	5141
Entropy (8bit):	4.922750044905097
Encrypted:	false
SSDEEP:	96:obWSMVb/PhVK010DH010D4VU0PLohtsW0nYEWe7DgGTTM:obyVb/HTWAW5sW0nYEr70Gk
MD5:	42AA07C48F92F778A3BEC2A6987890E2
SHA1:	80C5431FCF2ECEB330C09EDECA1AE88B271C1808
SHA-256:	9DDA1B82852839005CFE68CA25FCC9138B9950E6C42A0FC87F4B404087F4DCE6
SHA-512:	9396EAF229974AD0367AE0FC68C6180665A525EDBCECE5C25E1E09377703498F800E58F230237A4506F40441F8F345E103FB8ABDD7FB6BD635BCD243143B10ED
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m4!1m3!1i15!2i30304!3i18994!1m4!1m3!1i15!2i30304!3i18995!1m4!1m3!1i15!2i30305!3i18994!1m4!1m3!1i15!2i30305!3i18995!1m4!1m3!1i15!2i30306!3i18994!1m4!1m3!1i15!2i30306!3i18995!1m4!1m3!1i15!2i30307!3i18994!1m4!1m3!1i15!2i30307!3i18995!1m4!1m3!1i15!2i30308!3i18994!1m4!1m3!1i15!2i30308!3i18995!1m4!1m3!1i15!2i30309!3i18994!1m4!1m3!1i15!2i30309!3i18995!2m3!1e0!2sm!3i690435489!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e3!12m1!5b1&callback=_xdc_._nq9aay&client=gme-weeblyinc1&token=116024
Preview:	/* API Response */ _xdc_._nq9aay && _xdc_._nq9aay([{"id":"wvvuvwttvwuttut","base":[1986051840,1244862208],"zrange":[15,15],"layer":"m@690435489","features":[{"id":"6483246800245734785","a":[0,0,1986051840,1244862208,1986051840,1244862208],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"YMCA Jamboree Heights\"}}","io":[0,-13]},{"id":"16359340149825641114","a":[-49664,-38144,1986002176,1244824064,1986002176,1244824064],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"Phil Denman Park\"}}","io":[0,-13]},{"id":"4947818682278397746","a":[-11008,-62464],"bb":[-33,-13,34,5,-45,1,46,19],"c":"{\"1\":{\"title\":\"Centenary War Memorial\"}}"}]},{"id":"wvvuvwttvwuttuu","base":[1986051840,1244862208],"zrange":[15,15],"layer":"m@690435489","features":[{"id":"6483246800245734785","a":[0,0,1986051840,1244862208,1986051840,1244862208],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-171,-22,-9,-4],"c":"{\"1\":{\"title\":\"YMCA Jamboree Heights\"}}","io":[0,-13]

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.216478854650569
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+kxl9t3ll/sup:6v/lhPfA/Ukvjp
MD5:	8327A6037AE00A5BE9F75E63EE1B9FBE
SHA1:	A812C79B0D125E4946B33446EAE0353F518627E2
SHA-256:	FE67E12A6497F8518EF1673FD8CF5622871935FF85F204715E78B2009DD48588
SHA-512:	EAAE2B937F3DC48305AC697A791067902360861244832024A84FD32F8E608CDAF9504C63FFF49B6DC06153E6B0C797C7C013757845619CDF0FCDB32975C9CB72
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/transparent.png
Preview:	.PNG........IHDR.....................IDATx.c..........(.....IEND.B`.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	37822
Entropy (8bit):	5.5647044681074584
Encrypted:	false
SSDEEP:	768:8egW1iLAWdbcMCw5Kqjjm4KtPcM573A43FM:8egW1in
MD5:	1FCD6CB0AC3E69FE4188FCFCECE54B5E
SHA1:	827ECE7760ABD2F8CC83B781B8C2FEF210A586FF
SHA-256:	2DC6609007A0B759A3D3E3437F0766116E13EB954CB7F457110A3B24F0C0345C
SHA-512:	BE0B511BC003E633E44303306DF0BCA6C14A84EDAB87B0FF14BB288ED6B78DD9DDD35475CBD447B7369D0047DBF622FD8DC8B5325F738B1183D64B8D1B3CECC4
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700\|Google+Sans:400,500,700\|Google+Sans+Text:400&lang=en"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 201x230, components 3
Category:	dropped
Size (bytes):	13174
Entropy (8bit):	7.82965328579702
Encrypted:	false
SSDEEP:	384:xYNg7rMQwu0Oxc5WnAoJlWdrbypr39ZyI7+Re:xYysJ75mAoSAx57+Re
MD5:	7A069D668246700BC8179B683C5A0D6C
SHA1:	AB76F7208D487F989FFA04CD9A9FD3E8BBEF7857
SHA-256:	024B6DC90D2C4A73B933CF55FFE1A1E2CFD24713C49B0B6A6B33D6CE309107C6
SHA-512:	73B31E1569A6000D3D44E15C29AFA1994132FA8A1EC6EE438EA9C77B242B43DDAEF4AF2B69FD91ECE52440764D9171DEEACDFA5ACF538C2FEA686D1A2AD7A4C9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	dropped
Size (bytes):	29880
Entropy (8bit):	7.850525600479244
Encrypted:	false
SSDEEP:	384:/peE62Qz8jYGDrUM9NFmuFuhTYFpZayH1wMaLp251+MzZx0ZcTjqvf3JZ1ck2ZhP:/cDzyDoMHFJHSFAwsmAEckEhP
MD5:	B36BE0D65067FF41CAC79A6A57BEBE40
SHA1:	85A3A7CA04B8B46FEEE395E1F3833E72E6DA59BB
SHA-256:	8693B7CE5EDBB74E61224678849BE8C321E2C601FD04F207F2F21A1D3900A77F
SHA-512:	936987F431E3B1C49FA35AF0C4BD513784039257405334B56D5E506C4C9687769218CFB6D3840831519B5EF95ADB575A63290CEEF71C5513D73ABFDD44A9912A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............6......................................................................................................................................................................5.6L.M.1t...................k..xZ.r]..................tv,...`^........N.c...........84.-....I.....-.\.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6426
Entropy (8bit):	7.928748497025203
Encrypted:	false
SSDEEP:	96:Ae4TVqqacJz8OgyOfHCssrZpAjra6l/BkV0fjkBU6STM8c+Sqxt9DlkLN:AeUgqaeOvKdiSSpkqjkBRJ8qqx3Dlkx
MD5:	611DD0104816D4B4BC35751A91A64568
SHA1:	36766CF14C3285FCEFD2E700D430B6837571D4D8
SHA-256:	CBD38122213A5DD5A1F03220CEFCEC3F2D4F1FE91855E16800E45406C7033B15
SHA-512:	FA822A4308048C4395C694F7608818C39679CE7F0C32777FE44CC259D1B1BE01995500EAA63E9BEB2673AF854ACAE4A7BEA46AB521D3B6B68BDF258F4D4D825E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.....................y~...................................................NRV......8ehl.......T.....K..&.....o.........].....rl.C=.Z......6IDATx....b.......@..=[....zW..1`..i.\|.1..4M..H.e.&#...,e...'..g..K.~o...$A.\|4...a.a.&i.h..H..$.=..G..p).........>.#.j..uD.....6.3..K..H.._,z`..Ew..6.....l8...c..:....:............:.....8H....5M....(..N.A.....`....\|Y........8S ...FA}j.a`....@.f...C'.j....f.l..>`;.....(80.0\|a.l.>..4.....[w..y..A8..X.Q..T.+.f.f.8V....T..4.F..!...h.8N..]o=.B.{A....3b.u.F.....>....I....x.N...D.n8.4hw:8.K.e......6....@UL...6..=....m....Q.P..f.S\.2Z....L.P..b.V...Ak..............M..h6.. ...8...g.D....._.*fC........X....%.. ...J....c&..,...^8}.....A`[.K......K.n.l.uW......./.b.\8 ..D..\|.q.....sA...@U...r...D..u............p....Lm....X.\|. .a.v^7....$.].5.G...l...6J..j.1.\.X...6.uj.e...@.....gz....t..v...L.Y.m.v..,x.l......\|G...(..b....x.?..Qh..^....L.....\....O.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2850), with no line terminators
Category:	downloaded
Size (bytes):	2850
Entropy (8bit):	5.892413098765505
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08mayyqHSFYc0Ck3Rut7eG9Z:wsbSUtJfxrqLWWWdV6j1vy3HuQUf
MD5:	472EDBC2E7E94191DD518844D4141799
SHA1:	DE5BB6E15E6EB5252E299A0A7CC0BCDB7DB0A923
SHA-256:	5AB39C9E3DCD0FC7B22A60481C53EA3990D52083C71F8514BD4A3FC98BB71149
SHA-512:	58926F5E29F959A8804814DF5488A2A754141F58854B32B85810D3BB4E7E189A6220466F4B96BDF9C954D93381EB401565A81449CDD98A41249022FFACB124BC
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984344943/?random=1714104722667&cv=11&fst=1714104722667&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 30389
Category:	downloaded
Size (bytes):	7644
Entropy (8bit):	7.9709055862666585
Encrypted:	false
SSDEEP:	96:f7NQfx5/g2LW6FVguXtNJcouOWL7gJchaLQ9BbMfC88bwGOg1ccRd/g8liC4IC+t:zKLg2LH3AopfCwU9ZMleOg1cE68ASDJ
MD5:	BCE9D479023DE46160B4C473E713142A
SHA1:	EF50FFAD2E27A3EDA31A9ED3752504F6428A6987
SHA-256:	65509BE27652BB2814AC6234F78AB28EBB3F37C3EBCD935CC66AAD5273C683BA
SHA-512:	F397558E517FCBD380427E5302B1E786E0F445C0C8521AD038E4A9E36B8833B459F16433348CA6C44D101A8A78C042AAAE147DBA3E55888B27BD588976072B54
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/about-the-program.html
Preview:	...........=.r.8...{..f/.g.-.%.....d...Jr..$........w.g.'....%Q..g.>..$...Fw......w/^.]...9..3.d.......$......Tp..w.C;t....B.N....I.g.....q....7b.G.c.<.=.]...6.q].?...3?.\|...A.......g..L.....J.AYbu.x.....ZcySCKH3.}..i..........P.c....S..KP.l....Y0....-6Z.....^$Y(@d31..@..{...d<.,...e\.:...u..q.b..zc...C...3;..Mm....t..fB..Z......O.........y....9...g.G..w<n.z......f.}.n.v.#?.U.x...d..(p.%.Q.U.{U...VJ........Sd..Jg.{.j.g;...a.[..9... ....R.(..tc....a.......huUz......NU....f.Q.A..J"......4..^3...h........g .A.~..@..~5...%6..xP..M.m.e..."A. @..d.~.4.l.......~..y..R. ....9V}.]s1.>..?...L...r..+\....r.d.B......TcvkV.6@.g`zC.N;..6......X{`.3Q...%Bd..c..Y.x....e...\|f;.......o4]...`.m...LF#.I.=B.>...A}1.../F..c{^^a......=...1..V....#.3I..zau.y..z.Kq..A......O.8.x...p..l_.#."3....N..:......X..\|........3.H8....U.....[...J...&.V....fA./...-1...)...."...n..O....-.{e..s4.v.#.._.(V.>...M...w..(....i.[yB....q...&...-!.s..n(.M#......{.............z~.4..6

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3134), with no line terminators
Category:	downloaded
Size (bytes):	3134
Entropy (8bit):	5.968505169845471
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j15ECwo2QyNGl3rGu:JrPWwwGCwofxX
MD5:	E570233B31DE2E8CD39D8AAC79FE47D5
SHA1:	F41F45425253D98A1BBA975DA1415D59BDB608C0
SHA-256:	B8477208EAE6C79C057C9FCD94AA8016476299574FDFD92A9AEBFAC2B418B8F9
SHA-512:	CEC8A4E8BF62534FFF5FD3F7728783F2AACCE9A75B7C1BFAB6A34DE3D4858223702F3CE1BA720D7DC1713934F521EF22C31B9D916EDCE09B0B7910C80550939B
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/630646945/?random=1714104722909&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33134)
Category:	downloaded
Size (bytes):	610897
Entropy (8bit):	5.281433851714316
Encrypted:	false
SSDEEP:	6144:NRTSP0UrxSW3ma5WzA/bkQ0aJWfxcazlV:NRTuHtVBWz6xOhzlV
MD5:	3B9E6D36B68289323E8695DC3E566595
SHA1:	84C8F78EED746D5A644B2F0C0AF579BD22867DCE
SHA-256:	DC5A468F452D5E58E56DA75A7E5153AE7D087131AFC5C7DE87BA74D953F55002
SHA-512:	80E7615695988AF35AABDAD2836775684E12155E42C0C524EDD9659A6252B054FC1544EB49A2423A4B1F24E926A4E4A4AF9CE316B5B45B5BEA06B1DD717437DB
Malicious:	false
Reputation:	low
URL:	"https://static.xx.fbcdn.net/rsrc.php/v3/yx/l/0,cross/S0jWmsE7Isg.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;border-color:#DADDE1 #0e1f5b #0e1f5b #d9dfea;border-style:solid;border-width:1px;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputaux{background:#ebedf0;border-color:#EBEDF0 #666 #666 #e7e7e7;color:#000}.inputsearch{background:#FFFFFF url(/rsrc.php/v3/yL/r/unHwF9CkMyM.png) no-repeat left 4px;padding-left:17px}.html{touch-action:manipulation}body{back

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18915)
Category:	downloaded
Size (bytes):	43237
Entropy (8bit):	5.680707641754852
Encrypted:	false
SSDEEP:	768:5RWw2BBHWtPd0h3A4LWhNzrXNAtU9ArbM+AI99yNIE:5QBZWtmw4LqPXNIU9ArbMP
MD5:	A20A57297296210AE55C26306436FCE5
SHA1:	AF8363C369F8FD23868093CE0FF02C8D88C229C0
SHA-256:	2DE52103B1FEEB037AF1757A1D10CB77A335258410AFF50F3CC4B93589357FDB
SHA-512:	E0BD233E5F75ECCC4D5018E1F7A4650D13BDD84D4DDCBB1BF482CB35CC836B85CE146F0A2B41DEA578CECF05FB8E7A6C9B6F28DC79A81801A9898B700860020C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/t3hOLs8wlXy/. /.__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$/i,d=Math.ceil,e=Math.floor,f="[BigNumber Error] ",i=f+"Number primitive has more than 15 significant digits: ",j=1e14,k=14,l=9007199254740991,m=[1,10,100,1e3,1e4,1e5,1e6,1e7,1e8,1e9,1e10,1e11,1e12,1e13],n=1e7,o=1e9;function p(b){var g,h,x,y=a.prototype={constructor:a,toString:null,valueOf:null},z=new a(1),A=20,B=4,C=-7,D=21,E=-1e7,F=1e7,G=!1,H=1,I=0,J={prefix:"",groupSize:3,secondaryGroupSize:0,groupSeparator:",",decimalSeparator:".",fractionGroupSize:0,fractionGroupSeparator:"\xa0",suffix:""},K="0123456789abcdefghijklmnopqrstuvwxyz";function a(b,d){var f,g,j,m,n,o,p,q,r=this;if(!(r instanceof a))return new a(b,d);if(d==null){if(b&&b._isBigNumber===!0){r.s=b.s;!b.c\|\|b.e>F?r.c=r.e=null:b.e<E?r.c=[r.e=0]:(r.e=b.e,r.c=b.c.slice());retur

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 647552
Category:	downloaded
Size (bytes):	63035
Entropy (8bit):	7.994810221275993
Encrypted:	true
SSDEEP:	1536:eX+c4KDfGD4I2kDwzlvmSpPhlzTqgUpwNK0qRLeP:q+c4KrGcI2pNmyXqPs3geP
MD5:	552470732C7F4F5C7265F41521E99DCA
SHA1:	4BA9A7FEE20967800C9ECD8EEC1DEA6838DEEF08
SHA-256:	83F79F45CA96D61F1D73806BFC4EF21B4607368D29D74643B4EA24CAF92F8EEC
SHA-512:	5726CE7CEB971B31CBC8611671B1E5E427971A47229F2C0E5DE01839DF136D71F707972E7488FDEECD7BC12023646DAD935B1E1B1DF6E03C42C8B8A57B1A1E12
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/vendor.css
Preview:	...........{o#Ir/.U.X...K..F....80....{a...X......~x.....,V>..I.....t3#~.......v......e..7.YU.f.........z....v.......y.y........>\|.....w..n..+...v.....7...'z..v'.\m.u.Pg..;..n.......=[....?...4.. ..0.U.}.p.5...........O.@7......:'.....]...O....~.q.^..N..,7....-)X6.o.^.#..).j...O....4)HN4.T.rL!.&...>%....f."3N.......sJ.+..R................l......I..Y..U."Z...P..@..(...=.P_D+.d..U..!1`.T....k.].?..j...v..]N.....^5.._.oO...]..G.U=o.W7.....q..$<C>L& .j..'....a...8.......@......ok8..%...........r.v.....`..J.e..t7.}.>dt.2...iL.....Q.JB.....$..Y,....LCC.....f...2`&Z,..:1!...2F!8.=<t^....R.i5.cR$..e.RpBz.......d.zo_....p...q..".X...=D.)...-(....\.b....4W....^P.+.7.........yF.......l..[..N.u.>...b^3.A~.<y.=....5.,.b^A.q......M...+..v...j....U.$JU...n..S.(..9.....B..S...D..#....a....ON..p..i..P...'..Q.....3P\,Daj.. H\.Z..+...0u.h.$.n.V..ks.*..A..?.R..\..M.?...c..e..\|.O.?....2VQ ..N.!>R.....^m.].......DD. .= ..&.....~X(B.jDt'.,."....O.B..W#.C.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?
Preview:	<html></html>

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 40076
Category:	downloaded
Size (bytes):	8286
Entropy (8bit):	7.975821299796965
Encrypted:	false
SSDEEP:	192:JENhjyAtcyVVJTLGeqnEE5toXMvWSk1RZ6Juo:JENpyqHVLFcyMuSk1KJuo
MD5:	572D2F398F55C31D50342EC354FF1F30
SHA1:	FCCE6DB5667EC7D3A8F9F840BA982B23829DCB74
SHA-256:	88883CC875DB11BCDD4A58E1BF5F4C76182F3FED1C9F0449DDA56046B389ABB6
SHA-512:	8AEE0F6806CF354D2FE8E0FD33177E1443E9994D52E9007554AD8966DB82737B8F7A208960B96791379C9A18BA893525913099DF81E807280236A01DA4593522
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/blog
Preview:	...........=kw.6...s..@.6..Q...%...I.{...'.'..(HbL.IYq]..;3...([..6...I`03...3...~.......<c.x...........q_c....uF..6..Y.4..2............C..s......n4.}.Nl.g...............x....E..<..,.f<./zZ0.Dn...=..s.?.~....1.....eq..M.C.9.;C....;..Y.R...2.la.Y....{n.g^`.#.2.f.l.V..[.M.".....c#...............?.~.O......+..`.Om.........'.14.C.B.f..r.!g_...@M.....K.\Er.z7%8....I28.......=...7.g.xz.\....t,.........b..C.?.&..2gb...{.xd.k.y.Kz.... .3E..0....A/e..n...9..{V.Z.B..R...y0..x...s...G+c`G....gB..4z.&......l:Q.10\..f...UP........&.D.xz4......[.f.^m...B.D...oh.l.......j4.-k.Q..d..A.. .L.bQ.. ...(9`..2.......\.....}.N+.n[..(.>.j.x...X>.D.t....D.q..=n..HU.....E.....iT..6.....<..7.. ..P'=.%~.~.`W...i]tQ.].E.9/.1....+..D\|...V..v+Bl...!G...bc..1.;.X...!.0..cC...Gh.C{...N.fw,_.%...........w..+J.>..1r.7.g}....k.!..j....R...&.V..du..pt2"w..v......j.H7.....@?.@..^..v.F.n4$2.V.b....@..YG...F9mi.&.Oe.....&#....&..8..u........{#paM6A...@.Z......R.7..j.......N.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 355343
Category:	downloaded
Size (bytes):	37777
Entropy (8bit):	7.991483113695333
Encrypted:	true
SSDEEP:	768:KWPymxXvl3NiYiDguRii8XilJUezCSdiePpdWgD2dW5YC7MMEb2Sa:Zyc/ldTS0dXEZMgDJ71wa
MD5:	C6EAC4F56E78ED961279311859214D13
SHA1:	816665092D10BB140EB707E305AE008D0FBE9A13
SHA-256:	DAC590854BA852E69F5FEF66C3AA74343355D32F0502281BB4F264651007A056
SHA-512:	6D86273118B47C4BFBA468AD351B5AE227270AF00AAB4621EA3513EC04AA88AF078A4DCF1449FC25021F524EA81C3F93E0D1EECB7863914C8AD3C7455B2E50CD
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css
Preview:	...........[.$.u0.W....f.VU....E.)r%.I..).X.YUY.SUY...v...-.\|..X..A4t.$@....S</z._pdF^.rn.Y=CP..w.2.9q..e.8..f.L..<{=.)V.a..&.t.O?Og.p.I.w.\|].v..r2....u.-.Y..%..z}9Mv.2[..G7.............p..g.~..t8..o..LA) ..@n..6.\|.../.W.\|;O..r..l}.n...1_.7........t..w ..d.L..a2........0.e.-..\|8.N...,Y.Nv.Y....p..E...y.T.+.l......\.,..J..4...Y...T...,..Y....o..".KB.\|....bmxs....a6....\|.L...O6\%.W.U......a./6.b...v?};..w.j3.m..V.r9....UZ.'__.w....JQy;,2..E1.._'..k...N.\gk%.n...P..%z.<[]..j.r..\...:zu.hMLJ..t...Y.[&S.....en.I.k.o.-5..../.D...:X$S.Y..oJXBv.....o.yq..JnG.O..H-of.=...e.....W.d..T.......6Y+...Zw..\|s..d0...7..@..\|..._I..?..z:...U..]...M.]....5v[....R].....\|2.,,...v.....e.Bi...mQ./.E.."..........]....:W...\&......T..B.G~U_..).J..@2(Y..6n.....n.:K.l.mq.wP1.lxT.wy..T.Z..d..).T./..t~....N..V...[.].nlK...{:H.En...E...l]_8.....b..R.....V...r.d]dj..}.F...(..0....N.wz."/...j.....Ws..+eA?H..i......di].d..~.....oD..4.S.0S...V.d.-.^>...../..N.'..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.880675283060514
Encrypted:	false
SSDEEP:	3:DulmMsi3nCnaOCmUKEnkcSGoSRriY:DuQtinCnagIabSRriY
MD5:	1A22870FACCE9205368E65A4223BBA69
SHA1:	14303D946CF4398FA36BC3DDB75AC486FC02CD28
SHA-256:	3C9EE0EF71FB531879191ED832BA99E1B3FDB0535968D33B539E07668A614C20
SHA-512:	ED6BF7A0269EBC2834CF59247CB32BA2171C65A99C4BFE98717F26EF781D5213156AD1CD71D17D1F2AF697B5D447B5AFD094583C8760BAF4E8972DDDB04FC811
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAmzD1kVCoYl7hIFDVkMGggSBQ28ierQEgUNg6hbPRIFDc5BTHoSBQ3sFToc?alt=proto
Preview:	CjkKCw1ZDBoIGgQIAxgBCgsNvInq0BoECAUYAQoLDYOoWz0aBAgJGAEKBw3OQUx6GgAKBw3sFTocGgA=

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUk4lmfpse:eBse
MD5:	377D257F2D2E294916143C069141C1C5
SHA1:	B7CAE69682CF31DD670B65088DB8395ACDA6ED3E
SHA-256:	AC8778041FDB7F2E08CEB574C9A766247EA26F1A7D90FA854C4EFCF4B361A957
SHA-512:	01211111688DC2007519FF56603FBE345D057337B911C829AAEE97B8D02E7D885E7A2C2D51730F54A04AEBC1821897C8041F15E216F1C973ED313087FA91A3FB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.854658548615582
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt082lWplvSFYc0Ck3R/7eG9nR:wsbSUtJfxrqLWWWdV6j16lWpRuQR9p
MD5:	571A57688334D4434790AA54FA8B109B
SHA1:	71BFC58829D6CDB9C47B42A6E881638F3588991C
SHA-256:	7EB3BBF636C0EE7F773C75A143149E66D70213725EAAEEE3AAB55AA54AABECD6
SHA-512:	63333907E4EFD5E448C6752CBF30F59266A84378458E42BE526E58E1CC8A877DD7C8F2374A6C5DA2E851AB5129DD3700CD3A75D6D1268B1231D7BADD77D81524
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/746791505/?random=1714104722873&cv=11&fst=1714104722873&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.579835038959453
Encrypted:	false
SSDEEP:	48:y7+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklwyZEDuExjGx:0+5AQHAray48f5JMYHIqxDu9
MD5:	B3A909ABA03FB29E8FE0E02A7D318ED6
SHA1:	CFB345B0A5D24AE200AB9A42C2A8ADCC51799E4D
SHA-256:	77DCECAD0ED516F2414912F5A50DEBE5D4DA9A774742DF62F43169573F805ABC
SHA-512:	F57D610023BC9C9E7A15F7A0EF773F736DE5A261669D09239DF736111A5039182053779A5CD2F77803EAC1288190AB325A04AA58CBF3483241278C7A66A0BF5F
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/undefined/sdk.js
Preview:	/1714104687,,JIT Construction: v1013068429,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 294, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	94896
Entropy (8bit):	7.9873169195609535
Encrypted:	false
SSDEEP:	1536:+NvwUSuyuP7sKhwZl7P1mq7nYG9KkDyxCvTNX6q+ojEf+op1bp1voayf6EGLlic:C9Suy87sl7P1N7nYjcyxCLNXrep1b3Q+
MD5:	9EB43E2A19C291E046AA6C594ECA67FC
SHA1:	647C018ED0BE49D935C758A2ECEB58F5CC7C08B3
SHA-256:	C4368445506602201B72D77E92FA91FC9CAB918898A5C8AF290D9726F687B10C
SHA-512:	9B7514EA109732756FBE1A0F3ABFD83B2FEEEB6A9F829D6A85493B3DA5FE8A713C2CB91E7E5B56EF7D6CB506A4553322779630C847B4AD3757D14F205F9FCA86
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&......$/....IDATx..I.m[....f....n..{...........J...M..M......RHH..h.D/.@. .B.IF..fn...f...).....1.\k.......;w...^.(..?.P......t.....Z..R.......X2)$R.e.).H..d..09..dmIY..h...1..Z........(r.h.F...:.o.....C...d.d2.."&%T.D.I...!...../.@,.3..[.......J..\n..."....GB.(.Zi"..ZD.H.s.LF.P$B}..2:grVr.".r.2(.&..$..9..s.)..(.....M.$....2S..Hh... C$.UB....4.,....5..J..dB9Q9a.}.J.k.J...K).b..b....HY.S)2.......(..#WMN..E..V^.D")E....g.1...@....Y.s..r.)..kE.U..F...j....Q....8...S."..r.I}...%n5M.....uu............c.._..gwU}"NW...S.}....R.kU..O.Rm....<....g.....\.B.ONos..>.O>_...Vf6.6...Zo.@P....<.....E....g.~....mwus"..B..E)...P_=...Z]+.'7L..k.C..n\......S.... ....s..Y....X.3...t.dUl....:U....Z.2...cZ...\|E...Z.Fqr.'..K{..T&....Y..Tzs.?...Q.<.\|-.U...c.r.b..so./..zo4.[.gX..D%.k./..JID .K.2.WgR.n.j.%w@..<..{..w......rv....9g......R......).D.....R..,B.......}....T..r..jBQeD.S.HW.mJ....=.rc.\..Z....A^[M...\.DQ...l-^o..jP...r..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	254696
Entropy (8bit):	5.5782929594630435
Encrypted:	false
SSDEEP:	6144:evQX5NzJEYLceF+hYTnXP9RIMGN1N5YDS1:u+xJRkNP1
MD5:	E162C0A5744D68BEA514EDFEE55B4C5A
SHA1:	49E2C3EAAAE3B26A5D05CEE7C46CEE2B9F24205E
SHA-256:	90EBED3A0B9DB4F5458630E6691AFD54EC98B35606DA8C4A2CC405B6A5554FAA
SHA-512:	7F839BA6718B5D452ECEFD5714C17A38E7277EDBD739541083D5C09A9D2811B39EF2B05FC9442F0E76CCA1807A80F9809E9D4FF855C71A9D51938B840563BB4F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-KJ97FGF0R3&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","painrehabilitation\\.com\\.au"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_city

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 210934
Category:	downloaded
Size (bytes):	29663
Entropy (8bit):	7.991330839155293
Encrypted:	true
SSDEEP:	768:7Brv8RtQCh2kf7NAuRUEtcFrkRYafPf6ArhdewOFWp:75av2kyu+puYa3iArjpsS
MD5:	29C20B995313A7D26DCA333C33383D9F
SHA1:	46AF545A03A3F9739A9E284E46420A8FAE692C98
SHA-256:	028E76DB03EE4EC81D6F5CD961B0006251A51B088D3A7D03EBC87BE3FC7303F8
SHA-512:	C312891C6F34195ACDAACEA7FEEB3D1D22C0D899DCDEF3D1CC0799C328E41356958CC73E7C73A0FAB41EEA2D6EF97D4D53F588DD5FCF2288982D2685F0399BFD
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/css/sites.css?buildTime=1644361842
Preview:	.............. .Wx..1]....C.Rx..g.......wvtP.UE7%.T.+...d.E..U=.....D..D".H$......l.x..NyH.g...X..r...."?...I.o_'..]0.o_?~.?...l...y........x(.>~.O....x..>fI......-....}.n..<d..]...}.\|.y......W.s...^~/V[.#.ww.%/.>.....o).<.M......O...!/.c...$...c.\|J7.;.qT...f...ny.....I.s.G.;..1....KE..hq.K<!:@.a B.....,q./..A.'..Xw...A2.?.-j.mNl.?{H..y..Gb.h#..B3....1.t.. .M......R..8.Aw.........FO.q.W...,....u..~...3..Wb.MZ$k.M...n..?.h....1)..:..8K..w....w`.CDH.....h.)J.S..."I...=B."?.'g...HL\|.b.=..X..b..+..........y ..X.y0..8z........EU.Y(a0ge.S...@E`.JGs.}.@m..K...e.D.L(. .. d........+......W.$....?....U...K6i.\|.{&..p......<....v..\.....6\|..uc.T.....6...u..T....6...uc.<6m..e /...S.,.....?.F7.A5l.....?.B7.A.l.....?.B7.A.l.....?xl...4..g....\...........T........U...T........U...T......?.Y.d.....v..\.....6...u..T.....6...u..T.....6...u..<6}.g....l.A..Y.;.=[2.sg.z..F.\|....;s.%+=w.g+f.....n.=a..9H.f.E....$c...>X..*.U....WmP.h\.A....I..u......4B..M.%."..(E

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5084390
Category:	downloaded
Size (bytes):	792908
Entropy (8bit):	7.999338545508815
Encrypted:	true
SSDEEP:	12288:Oti1HyKB1w6SShTRgRBelG/Kvbsqx1gzO1ePNjwdjglx8QFHzkS+Ckd2ZGqJrnVk:OtQHdltR/jDl1gYeVEpg3x2CCQvk
MD5:	623D461C6669E0B477C8B8F62BF69D1F
SHA1:	4059B8E9DE04F4576A4DBD52A6ABFD04AA4B725C
SHA-256:	AF5B59A7A9FDA3E5B4E6D01348E6E49DB4ECC2763385AB5BA0835C3CDA66532C
SHA-512:	116D897A480BDACA7D4DCDFF68162E507575DF4667AAE82E7C8DE11645CF1FAAAAF61B5E066A67AB0FBD84A9A7162B10821B24FE41D38503A87D7F76923C45EF
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/onboard-frontend.js
Preview:	...........r.F.(.+2vJE...d..../-.jdI[.3..Q...0....J....r?.\|.Y...h. E9.$S5..4.....^1.N2.......{].YE..e4.z..G>O.........<M.Q...<.}V.2O.H..h.n.Gq7...._.(]_...:.yI....MHV.Z.$-_....&%\|Z<x.A.z......TA.$A..A.?._....^L.}R.SRT....CR...YJ....Jg.........fi5..x.U.y.D.....b.;.......A%...g.P.qBA....s?.....4...Yo.S>..L4....B...`......X....J...a:.. n...\|2.3.sw.e.....4.Lp......^v.Er.U.%..5H....N....Ak..[.U...7..K..cA.Y.m.....v.Q...8A(Q.&..!ew..Z6-.T...wI..dL.O...).Wp..F....Sz....)(_..i..a......#.. .f...V,.....v.W.Tg=.#`Gw&..?.."..s.g..8.i...7....}v:a.dg.j@l8..q......y(...u^...mG......r...p#..0./^.?.>....Y...l......oow.9...W.i..J .....X..d......t..h.6T....B....6..........1..)..Y........wP..1.:.Y...'...T[.A'...,...-.!~..........3.B...Nu..@ .*.N..6;>P/..J2.kR..\...n....{.....q..8.....^...M.i.C.?..Y....I.T...b.].J....V].D....`I..,&e...hB\|.i.7.%.O$.........IR.vwa+I...(...j.S.c._..UE4.....~.....9...?3R"...!.....P.Z.........V.7..b..#..}.B.Q..kP.x.P.)...".

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	dropped
Size (bytes):	63468
Entropy (8bit):	7.949974955398468
Encrypted:	false
SSDEEP:	1536:hevMzawYR7v//zk3k0Bjr6POZ37rzyVdDGkBJ/9JC:k0zawY93WkQYOZ33GXDGkB59k
MD5:	68DC79A220F880EAB7576508E798FC57
SHA1:	23B02714F772D336746E6B8B76881A584FD71420
SHA-256:	A5D063C78600F8195499E6FC4DDFA07BAE4BCB7FC9CE8952744EE03B45E3FEF6
SHA-512:	76BEFAF252C81052592267ED37C78B9FF2CB223A81B5265702C113679A7C0BF46202F62E339AA0555A3DE734883F8A86D05C41AB148BC164D77D13D3D07C78F8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............4.....................................................................................................................................................................3q.C...B.O.d.J!...M......................`.0.......2......N...%...%Ki.r.V..qu>^{9Od.`#.2.o>...}.:J*6.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 4830
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	7.574530401982998
Encrypted:	false
SSDEEP:	12:XMHel4JTOtfx1BZXKW/up+LZKIKLnHe7WbnJuU1+Q:XGuWTOTDdKWk+LZK/UWbnJuEl
MD5:	4B74B1A5D4DCC838A79C6995EC563A9C
SHA1:	7E209CC8D051F7D09994E329B53D226EE6992F40
SHA-256:	2F4EB588D97B87164289D72A0428BA635D8E2C2DA6550F61480C45D5CBA4E9B4
SHA-512:	BF94804398708BD5F3658146BF5C9D06978C24EB46224F7DF0F6F12E91283D8E3A883AE828411B57F8FA46AD97E2384E3CA1A89F23F5F25CCD520A90B95182D4
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Cabin:400,700,400italic,700italic&subset=latin,latin-ext"
Preview:	...........Oo.0.......n.4..&iv.qgM .......MR.4......cS.....U.W?...=.......d...:....:_V..S..o=.,-Dy..>MoE..1^..2...i).~..D1...A..s.I>.......7<..My6.r....E-S)../.n.r.....uF.\.*.~h.......5.?~i....]5.J.C.a..s\|.v.,Ry.o.....V./g..I.B}..K. v..{.....2.C.xb...[ ...6........".....P.Y...-.K. .d-`H....;....r.;y.....d.Y....,..M......(..U.:ZN.S... .....:h.F....0.X.SV~{....P.....y.\|...26...2&...o..J.e...c.[......G06u.l5...[.2.1clj}z.....z~..oM..X.w..{fUZ../..7+....}KW..m..M.'....8i..z>.L.q..S....gU.E..N.......r...c..?D.................

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2781), with no line terminators
Category:	downloaded
Size (bytes):	2781
Entropy (8bit):	5.852319668603381
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08IlWpqvSFYc0Ck3R/7eG9nJ:wsbSUtJfxrqLWWWdV6j1slWpouQRr
MD5:	30A297A49319F294C559BABB45E2337C
SHA1:	6AD0DED3E1A26C4262B378594B245FD9209FE924
SHA-256:	355CD07807419AC3F83370580221F8C1E6DC044C1499E84D97456266EBA1C82A
SHA-512:	3051712E2C82AEB88CFB592B7442658AEB5058A6324549ED41B9BB04348B82CF0DB3808F770AB4036B00A58A72AE5BA5EC33AA6188A43D12DB15204A1CBD45BA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/746791505/?random=1714104722850&cv=11&fst=1714104722850&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	13101
Entropy (8bit):	7.954247990439634
Encrypted:	false
SSDEEP:	192:hvrBbzq4rrfnF3KZkI6GfNe1Uiyscsa6pvJ4eLZxy6G/Gstz5KJV6qUG31Ko5hXx:prg4XQx6YdF6N2AxyfqUPkhXMEKo
MD5:	294F049EC1A02C8B0EF3FBBD7A803B34
SHA1:	6945C7BE30C1F964A28D35AC584BFA4181AC1913
SHA-256:	A2DD0CF90A81572782CA8F1E5C3E88A5046FCD1D9067EE79516FD928C4ECF8C7
SHA-512:	49ACA364249DB884F2994C9B9EFA3D291012A1F50235AB5129B32B4BAA95C5F47F9D9416E247772A1B6B8585A8B5852B2DD5525315AFE5EC6800A25DBAE00002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz.........y~..............................................Q.i.................NRV'.Ej....5.Q.......8......C.]ehlZ]a......"...R....o..8.........................J.......\......g...]..x...4.S..=.Z> .G..1.IDATx...g.....(+.L&..s.I....g......u$.......Z.t7Ap..T>U...<.U.-)...m..S.wi.e"Aj.K.^.$1..).<W.......\.b.p)I...]ds...C@.2.....$.a.j.d.^.....]...n.K.....5.d..QW..S)..#..r'.....:7. .-.%.....6......R...\8.......:(.s:r<.U]../.1.b.zwId\ ....Y...9.#t=.l..J..sTI...!...6+..;cv..L...7@..a.wO.>.........0.`$..^O..h..H+...f.SH..$..l.I..0A.!..22.8cT.x.\..2$P..t.K.%zC......C./i&.x.@Or....(.m..I.A)piI.W....!....h&V2....s...@..3.]..x.z..`..;..l.K..0..]............]=.<b$JbqPV.FC....b.m..m.2#...... ....g.....=.......m.9..d.r...{....#.fz.h.]py.....'..5..+..0(...d.(.a...t.Kuf..!.....*.....'U....?.J.....R..Ko+.v1.o..z...J.PQ...+...ehd_.l..?.I=3........

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	7.9178709594981544
Encrypted:	false
SSDEEP:	192:HdUfZK6ruWFqBt5T0IeZdW1oMC5njiJ0kxdsMz3yXF+:HmZK5KqBb1K41W5jiJ0Osc8U
MD5:	135E61A61184CB0CECA5447677B64D5A
SHA1:	7BFCA7AB14C7BE8688729FE5C76D01C15DCCC0FC
SHA-256:	86CC78E492048DABF9309AF79C2504CA65DC7DD5D071259060517AE4BD494DE8
SHA-512:	7E9111002C5D2FD366761BA7DC229A596D8C45954B1E0CB07A55999E737B20B84903A47FFF7221572576DE55766C47EDFFBF77BFEBC1F3FBF43FCFA3E57F870E
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/8109833.jpg?250
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................A............................!.1."AQ.aq..2...#...$BCRb...4.D.....................................3.......................!1AQ.aq......."2...R#..B..............?...@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(...N......P..@(......P..@(......P..@(........Z.\.Oo.yj...h.........H.%(.q.y:....i...>(.M..E..d......[.2.uA'.R...()E+V.?_..Q.........<....z_..-bQx.......g.[....d./._.XKNB.Oj.....`n.)MZm.Wn.....~......9.6._N..?:....7.Z.6...cW.]..T..1...N.'..$v.....V.m....t..I{....x...6.vMf..X..7v..e...R...Lf.o.XJ....n...Q..i.[^/p...K...u ....P..@(.....C.@(......P..@(.J..;.:.9....-.M...)R.....t$l......t+...KN.....a..)....!..,.~.."..d.V.w...Xil...!K..}T..+.ms.^#-:m_i.......K.....3.7...Q.6......Q......{...JN.}.\.*...%.5.I..:...m./'.s2.h..L

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32604, version 3.393
Category:	downloaded
Size (bytes):	32604
Entropy (8bit):	7.993122989472145
Encrypted:	true
SSDEEP:	768:VmDivi59g7yrc8iKAbXHLk6cWPOHflfmMxSH3U:VmDuMg7yr4lzHzrPO/lXxSXU
MD5:	B61B564A07D65D68488DE3231BD0AC7B
SHA1:	4A2C6F4AF43F8C9BDA667D04D86ADF5CE8D68965
SHA-256:	7AAD8FA190F4B44090CEF42D194EBA8E6E474EEDC61AC8312EB05ADBFD3581D5
SHA-512:	34D652E8CFF33377322C56890FE15D2E16C5F690E137B2D01304801EE629D5CFA44D33576D088B325194E86479CDD128A12CD114D69DB6A723500E2986D5662D
Malicious:	false
Reputation:	low
URL:	https://d1g145x70srn7h.cloudfront.net/fonts/sqmarket/sqmarket-light.woff2
Preview:	wOF2.......\......it..~.........................?FFTM..Z..z..J.`..6....s.....L..E.6.$..`..r.. ..6..u.r?webf.[&Iq.9w_.....R.g.+...3.7.L.........M..c......&..3.0i'.P....Ld.4,!.......cO8..w..u..5.h.Ju.C.W.'{.`B&qR=...'..o..PH.2Ysg6........vr~..YZ,M..{.b.G.a\.H..tdH..&..:M.`...,Wm.9d.Gq\...c.%....o...<...u..6..[...>.....5.16.V/...Z.2.^?.....z-.{.5..3..{...\Y.k.....B..JC......_..5....L-.'...6...3.1.0.s....F...F...+7c..K...n...._KKc3.\|..~......].Gjb..S.0../..~.~&u...*.->V..,...n.W..6.V...D}D.g.<.B..........Z.;...43.F....-...Z.....-.Vl...`......h..b.......Q..o............aR.G..N..+.hi........h...HI.h...IT.I.....~...........=W.O..u+../.."W..?..Q.w. ....?. .. `"/;......N....?w}.L..J.......e...E{.....>....`.G...v.....h..Z.......&..-Y.-.5.......`.z......n.2.K.E.?.c.u0.....O.......i...7]........)............n..#.?_#1..3".6.m....,.Q....v.......[...8......P....e...W^.r.....k....?D.uO...1.A.v.%.......C..%.O..C.bI..\|R....L3S.FC.)rA.B%.]..=.k......hp. .q.[.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1280%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047149291
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 832
Category:	downloaded
Size (bytes):	449
Entropy (8bit):	7.417450953717127
Encrypted:	false
SSDEEP:	12:XwNFE+8BbICRwnkxcjYIjdH2lBxoVETkQpjB:XwNFybLRqkBKdH2lBxlTbpjB
MD5:	E58B413CFA1E5D5C0BBBED01743F7E11
SHA1:	D47845ADAF6408569D78265A29F060E40843EE79
SHA-256:	FDF49810CF924C023276F9B836F1BE03051E3294CC4AB2A4B36B08F633D15035
SHA-512:	B37FCA411C6A8957319317E5B5AC13581BCB639C1972284152A12B292E11CFE6889CDE09357F2181E2F3083719F7DD5D7F7821CDE47592DE67ABD610E560BC95
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/images/vector/checkmark.svg
Preview:	..........mR.n.0...+n.M+.......)#..F..f.....al..0..^..d.dq.........D.K.R.:..P....R....F.6.J.S..,M..0j..j!..,.I..N.SB=...x.-F8H.)..iw.........y.s..f...Hu....q.,J.+./.F)..Jt........5.x........Vm^t-.2..............YQ..)..R.E..DnD.J.z..$.B......)S.,S..~\|.MO.7.>..(....YX..U6...>...d..P.,?.P.Q.mJ:..>..j.....j.{........*\.?.@,.b.........M..-..D.0.?..{7tn.wt...o&.f..+8.............j..\|..n.GE.EI..<7.?rx...9>....l.mm..}quV.D\..$.......h@...

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10169)
Category:	downloaded
Size (bytes):	195037
Entropy (8bit):	5.656922108829895
Encrypted:	false
SSDEEP:	3072:vy2+HRcqGIpeJ1fXXqrvYGJsgzWYYbcrswzOZU9O47tYu25w6y7CnC+DEX0PwJgi:3+HR/GIpgXXqrY8JzLbBtYu25vICnC+S
MD5:	75DAED9075BB0F93C5F31A9655E3006C
SHA1:	B93C63AF861C141D836078622D1509036A1278C4
SHA-256:	8C3A20D8ABF2674317537BF4402551EC61E24759710083F2ACDFAD977C0E29DB
SHA-512:	6EB6E629C543A2C43C9161679DC958EF7A2C7ACB6AE0D3D8E466CD828DF67FDDC611F90B573C8F0A0CFA652E22A06B3088E8BAC046129C88A079C011FC7F8B46
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?v=3&client=gme-weeblyinc1
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=977\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=977\u0026hl=en-US\u0026"],null,null,null,1,"977",["https://khms0.google.com/kh?v=977\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=977\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=162\u0026hl=en-US\u0026"],null,null,null,null,"162",["https://khms0.google.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=162\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/360879484.jpg
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	214432
Entropy (8bit):	5.6388889562026865
Encrypted:	false
SSDEEP:	3072:4JVh7hhJ9vSfY4QTZhtoo3QfhI1n5W96xN+w3NINYXilOkrg9oE3jac5Qv:4Jv7hhHKGao335W96xa9g9oE3jac5Qv
MD5:	F747BE1BC428853071925839A36F0221
SHA1:	32A923FEDF7E0A1A703EA37E9B057D56DE19E079
SHA-256:	25C71A5F0CFCCF7E32EB37DF34039DDA90E08F89DEFF64EC0E3B5910054D4946
SHA-512:	BB7E26F397568CF67FD50D85A48EB39581E22B2C11A05E533F7C78F0C7AA03D5ED405AE6A0F250D85BDBD72D469448A4CBB7629CF2008D8169C2B3BBCB086EB0
Malicious:	false
Reputation:	low
URL:	https://squareup.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js
Preview:	(function(){function KPSDK_0x3846(){var _0x498836=['W5ZdJmkyWPKg','WRtdTSo+W7a','WR/cQ8kOW7JcJW','WRPUh0NcH8oeua','Bqj0','zmkSitVdG0mUueeutupdI8oFvIJdI3rn','WPtcGCkf','WOzXW7ddH8kACgObW78','W4uUWPSniSoFWRFdIhNdO8oZymoKW47cUmklqMJcHCoJWQBdN8kbx3TwsSoJW5hcUG','u3r+n8ozW6NcNmkYW7VdNe3dKgChW6yqzCk5c8oP','WPX6W7tdP8khpNDbW63dImkZr17dH2FcRmoVvCkFW4ZcVq','qNJcNu93W7HJWPfEW6T4rmo7W7O','CMBcQgfUWOi','W6FcThedWQJcRa','W5NdPcVdGH3cLvddHsddSh7dI8ourrxdPSot','rCoGmmk7WOfwWR3cNaq','WQBcNConW6yOxSoAW5BcUmoKW7ioW7VdPfBdGq','WOrFcu3cR8ozr8oBWP5o','WOazWO/dK8kIz8o8W4K','mZFdPCoP','kCk3dG5iW6dcKNhcJLJdMSoegq','FazSbs/cH3a6nCoU','WOfKWQNdPmobm3DCWR3dLmkP','WR3cLSonW7WFvmogW4lcVSoKW4aoW73dUv3dPIlcLSo3iwpcLCkCWPTsWRveWRZdLJa','W4/cMZS3lSoS','W6NcUwqzWOBcVa','Cdi8edilEmk0zLaTWRlcLa','cmodWRFdGwG','v3/cHLSthSknWOddLCoohh4F','WOFcGSkbr8oH','qSoGpCkOWOvuWQBcMG','WQLhW5tcSSouemkyqZ9nW5lcIJNdSGtdK0hdNmoy','WP11W5xcPq','W45yWRZcM2rBcSkOW7q','nZpdVCoixSkdaSoxBq','aSk7W59GWOy','W5FcI8oBWOlcNvX8','lqeTzJK9ySooWPbvWR9

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 562x100, components 3
Category:	dropped
Size (bytes):	17218
Entropy (8bit):	7.96412548974838
Encrypted:	false
SSDEEP:	384:uFL/vorTOPbExFDqchAAsvioVovMX7EVF7rBZS3UgrxY/iqLCYaT:uF7vo/sbEichAAUzV8GwRPS3Ugry/JLq
MD5:	369512FFF14FFF9FDF18A74F89A016FD
SHA1:	B1254DEE2D96BF54319322D6E8142D8F7A9E65D1
SHA-256:	A948C0A77C5C9A6711FD0D05CFCE0F7B8BA9F1EC100796A67C773CC3EEF923BF
SHA-512:	44B39A8F6309B7F6DDFC2EDAD305B41F1EF6DDB08BBE76DC67BF33DB5C49D2BC1665D73A88FA4DCF5B95B09BFBDA9CD27D901A54262E2042AD4A432A604D65DD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......d.2.............6..............................................................................._).B................_..l{>.=.9.V.K.=V.....b.;.v.2A.]N!...I.U..p..W..[w.<k6....=.Q.?..b..T.......................#.6.V.>.........8..v..w......q..{xsmW..B......\|\|.x92.7.l.<./..&.....Mp....15.&.M.i.I.......Z-.?i..9..D.@......V}....r.m.....t....................u....\|.a....&.M*.vVoE...w#..NK...)/W.../n.x^.U?A.....~.z..5..U....-_6-.LY..Ex.IZ..j.m..-..,..Kh..+.o...-L.'8..j.....[................;.j..:....N:Nf.otS..o......g...q...4..`M...7{..mA.#.........>....9...?.{...6...%.....F........{6vmO#.Y...1J_9.{.k.R..=.".];;.Z..s.0..K.rY"...m.n.....pj...S....s.k8.\|.wA.l...u...U.{...~..S..].:6...U.u..7.l...u....z...C...A.=.Mmw< .....st.~.M...5..U.+4..,cv.F..L`...f;.}...3.z.i..0.uK.K.S%x.s...U3$.c...

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 259x185, components 3
Category:	dropped
Size (bytes):	23471
Entropy (8bit):	7.958625914250196
Encrypted:	false
SSDEEP:	384:qtbt2TZ4bHsk5fa3R5uFU7QktixREa4wlTXUUeT5MoH/GsNZtFy8VouST7:ImZqZZa3R5uFjkof5vXu5MoOsltVVc
MD5:	C699C1125A9EFAF6A5C1C284228C071F
SHA1:	0619E0DFB202FB350BFD4D0494833A4DD023DE78
SHA-256:	0BE5AE8E8F1310331FFCF5569B1C64652B0F48D21D29DC45FDF224049DC7B1A1
SHA-512:	03D29A3AC304D81CD86E0179B27A422566B816DF6F2E1F1C36EE86EFEE88B4FFE2FB22A0A0F8FAF42D268CF7D754D960357049A06C6F0B08CAE18C1FF6C62ED1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................Y.........................!..1.."AQ.2a..#Bq..3R....$%48Cbr....57Sstuv.....6DTcw.&9d.....................................?........................!1.AQ....."2aq..3CRS...#5Br..$4.6D...............?..C..,..9H=...Mg.D..,v..9..C.I..\._9.!n.e.N0y..;..I9J.025.....iz.....X...]...;.2.I..T0...3.(X#.{S[.M....t7...6.YB+0e!#.\r...d.y..V.........#m;..l.l..'..5.$y..5^...4.i..Op..X4..a.qq.O.......v*.....n..i.U.2Z............+.-..O.8.]..X...../.<@....+S%....8...{...\..w...2.."x.2.c.6..k..&....U..`e.].."....>}u.............Kv....J..]tges..^..Q..=..../.".....J.}1...+..k...1_..t.U....2s+..'c..v.%9...EN.U....?.7..u.:.....8W...r...$.l.../.D.CiT....}.s...z.zTh...u..O}.1.....a..e.M9.e9}XV>..2..PG....8.....[.m.&.Ma.My..X}..`...............dO.a7..H..h8.h.YkK...@5....L.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10158)
Category:	downloaded
Size (bytes):	10159
Entropy (8bit):	5.258869481621991
Encrypted:	false
SSDEEP:	192:LnmBNp87rbM3DM15HKoFIqfezsAVTwUZ/hR79BWbbQGVaC5hRyhGWS44qpK7YXW:LmBN+M3DMfWzf79BWbcotDRsG14X4
MD5:	D6F0435164AEFE6CF324147B77C7B6BB
SHA1:	41050F6640694E4FB214881216207B0B2A080137
SHA-256:	3A95689E90E588B166F7B3ECD334959A2D6A3DA1D73D557C8FB72FA10CF465DD
SHA-512:	74A349346D3FFC1AC88DAF1B614859233D2D3B8315913F1D7B73DCD31AD85E7513BC1509778866B812936FDBDB78E11D4A751CB0007A51071678A93EF356C70F
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function u(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2387)
Category:	downloaded
Size (bytes):	73623
Entropy (8bit):	5.469149575913818
Encrypted:	false
SSDEEP:	1536:SUFmd1rO97vl9bdZtJDDw6E7X4G6wrmtHnM5CwkjeERF/MMVPfN:Rs1rO97HbdjVE6E7X1rKnM5CDeERF/MY
MD5:	29BDB9D33123A21BDD462E8A754339AF
SHA1:	32ABB15A435F092B47513CB219B0447276242C4B
SHA-256:	CBAC8B9543E40D26C1FA92ADD7E17D289040D80E842521ACAA4CA92355A708D6
SHA-512:	00AF2B0B0167C6A66A6D820DC1101FF9BCC2D5197F31A0231D78AE30DAE345B50C630575D96D55881BF1356681D48D6227F78347776FE0CB4CE7D4D2926DC46E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/map.js
Preview:	google.maps.__gjsload__('map', function(_){var Gja=function(a){try{return _.na.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},Hja=function(a){if(a.Fg){a:{a=a.Fg.responseText;if(_.na.JSON)try{var b=._.na.JSON.parse(a);break a}catch(c){}b=Gja(a)}return b}},Ija=function(){var a=_.fs();return _.I(a.Ig,17)},Jja=function(a,b){return a.Fg?new _.Jm(b.Fg,b.Gg):_.Km(a,_.ps(_.qs(a,b)))},Kja=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return"rtl"===b?!0:"ltr"===b?!1:"rtl"===window.getComputedStyle(a.getDiv()).direction},Lja=function(a,b){const c=a.length,d="string"===typeof a?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.6848915294816385
Encrypted:	false
SSDEEP:	3:knXiB5FS9t651hkdzBVRDhkoSCquS4yWmRhS/X:knXiB5FS9tGMdzjSzPOmRo/X
MD5:	C836C96155D7B79C72749037F3509B74
SHA1:	AF999079643093B96741577EC6ED6DE16B3A6221
SHA-256:	F0BB95DB7263D0246A9ACD70757E64ECF1AC5BAC8718A3A1086A103AF153CBF0
SHA-512:	D93CE699CD85D3BF7F6BA1B0D500BD4AC3D68798C1B02D1B55D94D2ED6234F34A4951C411B071BF67EC8D07983326A6869492D3F9DD46FFF39978F19AE0FDC07
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwmxEI439nqLQRIFDX8pqR0SBQ0VMWcCEgUNQPcu8hIFDa4n9vQSBQ0JX-4cEgUNGNOHwRIFDdArH0QSBQ3JeJ_WEgUNDXE97BIFDWDqP8Q=?alt=proto
Preview:	CloKBw1/KakdGgAKBw0VMWcCGgAKBw1A9y7yGgAKBw2uJ/b0GgAKBw0JX+4cGgAKBw0Y04fBGgAKBw3QKx9EGgAKBw3JeJ/WGgAKBw0NcT3sGgAKBw1g6j/EGgA=

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/1922450623.jpg
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 34877
Category:	downloaded
Size (bytes):	7605
Entropy (8bit):	7.972056241248818
Encrypted:	false
SSDEEP:	192:n9WcABt/LhbyE0a11kRYscUW/Y4T94Dq/4pn:n5AzjhbyA12Csw/Y/u/4pn
MD5:	922CFC3E5D4EB35E2A4FAB9CCDFFD214
SHA1:	103CA5C07DD69D1D5B3527D0D605FDE8B2E05D4F
SHA-256:	BD81E537DFCD90E689913847018C6520936DE3860C5C9F084149615B74BC32B6
SHA-512:	687839147A1E39A249DB94C755F6A90E97A996DFA02AA16FC06CFF0E4EE4986C1476852A2AE075FC513F27ACC47286DB4A50F0CDFC098B9E2D8584FDDFA3E470
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/referrals.html
Preview:	...........=iw.8.....?......}X.q..'.:.;v.w6..A.$1.H.......U.xI.-..t..=....U.B.P......>:...1...k.w.?..l.0[.....N.p......#p<.M..Q....#e..3.1...6.......c.S.]..;......P.z..`9P.Y.7.6..).p...@...B...&>N(.+..mm'.7<.E2)....c.I...iY.K.P:S..o......~Im......yt.....,...A..........L.+.......C'~U.j.z.U.z..w....e.9...l....J0._AE.%f....o.........(G.P.l.E..OA....cN=...0..;J,.....\..RM..I0.L..X...330.U..j..^.J.(Z@Ih.L.)...2..bN...tyL}V..%j.....9c@..~%...+d...(.1.k.61.........7~..~...593.{..h.[z.Q......cM.Sj.....:d\|.@.. .T...~-.).J..]......bwf.t......C'.k..V...F/....y...G.V.S...2s...k.Q.~..i-.G0}.^C.Jm...0.,..;q......h.]........&}QE_./..yy..8...{..;...U.................eQ....v.L.K.<.....t......+.d....c.1..[....;e,.R.O.oQ.....>f........r}..j..[...:#.u..Y..(.eV....SoC.3..z..H......@.X..z/t~7C#a...Y.E.b.... jr..~s..r..>.k.e.-.}%#kQ.........m.......~o....6.\|..h^.1>.<.7..v.\.tw...w...y.L...:..B0.S.Z..k....?.i..1(.(.f.D..<.E/l.yg.......@...r......

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 259x185, components 3
Category:	downloaded
Size (bytes):	23471
Entropy (8bit):	7.958625914250196
Encrypted:	false
SSDEEP:	384:qtbt2TZ4bHsk5fa3R5uFU7QktixREa4wlTXUUeT5MoH/GsNZtFy8VouST7:ImZqZZa3R5uFjkof5vXu5MoOsltVVc
MD5:	C699C1125A9EFAF6A5C1C284228C071F
SHA1:	0619E0DFB202FB350BFD4D0494833A4DD023DE78
SHA-256:	0BE5AE8E8F1310331FFCF5569B1C64652B0F48D21D29DC45FDF224049DC7B1A1
SHA-512:	03D29A3AC304D81CD86E0179B27A422566B816DF6F2E1F1C36EE86EFEE88B4FFE2FB22A0A0F8FAF42D268CF7D754D960357049A06C6F0B08CAE18C1FF6C62ED1
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/5533639.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................Y.........................!..1.."AQ.2a..#Bq..3R....$%48Cbr....57Sstuv.....6DTcw.&9d.....................................?........................!1.AQ....."2aq..3CRS...#5Br..$4.6D...............?..C..,..9H=...Mg.D..,v..9..C.I..\._9.!n.e.N0y..;..I9J.025.....iz.....X...]...;.2.I..T0...3.(X#.{S[.M....t7...6.YB+0e!#.\r...d.y..V.........#m;..l.l..'..5.$y..5^...4.i..Op..X4..a.qq.O.......v*.....n..i.U.2Z............+.-..O.8.]..X...../.<@....+S%....8...{...\..w...2.."x.2.c.6..k..&....U..`e.].."....>}u.............Kv....J..]tges..^..Q..=..../.".....J.}1...+..k...1_..t.U....2s+..'c..v.%9...EN.U....?.7..u.:.....8W...r...$.l.../.D.CiT....}.s...z.zTh...u..O}.1.....a..e.M9.e9}XV>..2..PG....8.....[.m.&.Ma.My..X}..`...............dO.a7..H..h8.h.YkK...@5....L.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4189)
Category:	downloaded
Size (bytes):	207960
Entropy (8bit):	5.540869052873454
Encrypted:	false
SSDEEP:	3072:otQaf5qZ3fhO+ARcE8+G1LceF2/ea8LR9Wk9ARCzOQjSTnXDL9btIMxwb3L:wQX5NA1YLceF+scTnXP9RIMQ7
MD5:	679AD8BE425C599795B8A5E20A5AFEEE
SHA1:	565CA96BA39867790FA31C3CA133612DE3EAEB0B
SHA-256:	396A1C9E0450216EF95C1692D5B60F44891454492C06010C1B152670E185063B
SHA-512:	2500C90A6C4C821757C48A10A393ECD8B40655AD7D46FB59316D56CF0A9F605BFFB14AB163D97BDC8CCAA492F25339D517090C928A68BE96AC62715413AB0875
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-9628652&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-9628652","vtp_remoteConfig":["map"],"tag_id":5},{"function":"__ogt_cps","priority":0,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105)
Category:	downloaded
Size (bytes):	60710
Entropy (8bit):	5.429951188337061
Encrypted:	false
SSDEEP:	768:8QGyo9vgt9d+aOMjBwSo3qi1ataFhhuYAAvYir53juPFvUD/T+FcqqvFp:8QGyGot9d+aOMjBwSo3XItkuSQFq/Fp
MD5:	D8EAA7B11556C1A5AF6C051A25CBBC27
SHA1:	74DE75D227EA814F2A85D71D4835697E164D142E
SHA-256:	A2EBF4490659DE726220C8368F799DF47DC1C8F7B0FF9AE891F65D49ED2C764C
SHA-512:	8B53C9AD525D76A72FDA55563057DF67885B20F5139F4F765C7A47C92668046AA50B3B0EE8717B357449B45FAF5A290EAC64552D5E60E0C3AED29FE129A6101A
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3itnb4/yJ/l/en_US/E-kDMNoSf3K.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7629809450395415"}),null);.__d("GroupsCometAnswerAgentEducationModalQuery$Parameters",["GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation"),metadata:{},name:"GroupsCometAnswerAgentEducationModalQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("CometProfileVerificationBadgePopoverQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6477118522380066"}),null);.__d("CometProfileVerificationBadgePopoverQuery$Parameters",["CometProfileVerificationBadgePopoverQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometProfileVerificationBadgePopoverQuery_facebookRelayOperation"),metadata:{},name:"CometProfileV

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7090
Category:	downloaded
Size (bytes):	1905
Entropy (8bit):	7.883787841310523
Encrypted:	false
SSDEEP:	48:Xw3SBSClsSfpTrth0WXshqa6zinAyPycQ/PM731vsg7t2X0:g3hSfrOthAzinAynQ36FvsghH
MD5:	B661193D66E65C5668A2EE4224646A0C
SHA1:	CD23EA1170B055810A56C52A73375EED64BC2E06
SHA-256:	D82AA8C4E8A2D96E6163A0300995C14C80E72020041B829E0365A9D9FC89CE71
SHA-512:	80F44166F80B6044DDC5A2014198939E5FC938B3707D8F733978FE3D48F6209829005B7274BA9419ABE4EDA19F36F66DBB33AF4BF554E28E6B6F68ECEE9222D9
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/custom.js?1530561231
Preview:	...........Xm..6..\|.+X.....v[ . ..h7M. .........6.JT%.^7...HY.....5..lq.g.>.?WPl.E..Z.,...g.?g.X.]...k.bf~......../.b.D..Xs...5.K.=M.....y.".z..7JcU..T{=.J...%.7..r...Y.......a.>...x..o%>f.up.:B.X./......Y.c K.Iq....8sy..?....wS...d....V..v..2v..$dK..(M...D&b^.J..e...;.BC..LHB.$J@.x.J.2...:.\....$ 5.Q.^.....dU..........D..ew.....9p..".,Q.I...F......Y..L.5....r9...L...){..S...q5....k........2(.d..J.-.$.s.l}.n..J^....RK......Ss!..g..T..^.....?...Iw. ..Xc.^..WR..l..Z-.......<K .zR..=../.b}....7..).....>\.X........6N.5.\2/..v.Y_.![m.N.....fv.\|......9...N.yx.W8..o...su5..4..........A......L_.YY...%....UL.}Y#9.b..%......+..os....e..MWg}S..J.;......k..,4&..\|C.H.. v......0S......)...b...9..t..u:...<^.y.5.e.5v..C%..jfel...h..p.C+..G..g.e(.U.U....u>..Z...q.@...(f<&.^&E.WD%........r..G.......Qzt.....H719&.fI..}.[N#......[......v.{.....q.X:...of.FK...L....?9....\?.m.(.Xr.R.(.....$A.eM..S0<..ul...J.%5..z...{.L$RL.wf9.....>.\.z%J,.J..,......~:.q..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24605)
Category:	downloaded
Size (bytes):	41679
Entropy (8bit):	5.4936189279113625
Encrypted:	false
SSDEEP:	768:1keY2FL4rhkGfV8Cj7szizyzMzKNSu3eq9zdlN:qe/+hkGfVXFu5XN
MD5:	87B5ECAAFD0E88097CBBB1BBB7695FE9
SHA1:	085D5B2112BB1AFA26B03B94183B6EEDC2F076B4
SHA-256:	5AF5EE0B37B1F0EF31C42932BBF81424E4BB53E95E87A47E058625C1AF2245DB
SHA-512:	C760FA5130EF53C99F4DC88E8843500022E63B2324C1EC8DC6C8F510C31A3CB784F0D38908C6F932E96BD566A0464A11EFD723AD73E72CA99626138A48C73092
Malicious:	false
Reputation:	low
URL:	https://a.quora.com/qevents.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.qevents=e():t.qevents=e()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:n})},e.n=function(t){var r=t&&t.__esModule?function(){return t["default"]}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s="./shared/qevents/main.js")}({"./shared/Class.js":function(t,e){function r(t,e){function r(){if(i\|\|(t.call(c),n(h,e,a),i=!0,e=null),this!==c){var r=this.__init__;r&&r.apply(this,arguments)}}var i,a=s.prototype=t.prototype,h=new s;return r.prototype=h,r.extend=o,h.constructor=r,r}function n(t,e,r){for(var n in e)e.ha

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	5.058665896060733
Encrypted:	false
SSDEEP:	3:cSmx3inFMArPG3+dfZszTcjnBJAhz1Ekkn3kYG+:cSg3yFMim0fZszIvAhW++
MD5:	3E3223370D27121470B05A90F960DC6A
SHA1:	4CB4236E9C512EFAC8C04DBFF20551F1E2C7577A
SHA-256:	D06981EAEB175FE921DBBFD8292679E10A836C16E43B6656D1691979F80247DF
SHA-512:	3449CBF0C0D126EABB5488A38D47C201E50F268203A8EA6891A562B352693045C9F55E78E73CD83A57BDE0AB9B0431198F260D799510995EC2A49CF9AAF35999
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgkPsPPL0LKXLhIFDVkMGggSBQ28ierQEgUNg6hbPRIFDc5BTHoSBQ3sFTocEgUNU1pHxRIFDaWTNiQ=?alt=proto
Preview:	ClwKBw1ZDBoIGgAKBw28ierQGgAKCw2DqFs9GgQIVhgCCiANzkFMehoECEwYAioTCApSDwoFQCEkLiMQARj/////DwoHDewVOhwaAAoHDVNaR8UaAAoHDaWTNiQaAA==

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11447), with no line terminators
Category:	downloaded
Size (bytes):	11447
Entropy (8bit):	4.924579626109253
Encrypted:	false
SSDEEP:	96:fCGVMLRpLRtLKLDLHLvLyLyLILmL2LFLMLkLFLULMLkL2LGL+LqLqLvL1LfLDQLQ:qGS
MD5:	01B3538E1C78FAFECE17084027E2EB3E
SHA1:	80876B0BB754F65716167904766568F50A795D79
SHA-256:	BC6E77DAA7D73F6A3A1989C09A6AF13F8B102DEDE51DB9F26415E63FA4D007F2
SHA-512:	E29A1DE82884E7408AC05E972C1591F32F5A643C6B848399BA4A43F4922BF7078517DAC3108A13C4EBC24AE4057A0033B32A68B7DCD421E43FE31CC814EED644
Malicious:	false
Reputation:	low
URL:	https://square-fonts-production-f.squarecdn.com/square-sans.min.css
Preview:	:root{--square-sans-text:"Square Sans Text VF","Square Sans Text",helvetica,arial,sans-serif;--square-sans-display:"Square Sans Display VF","Square Sans Display",helvetica,arial,sans-serif;--square-sans-mono:"Square Sans Mono VF","Square Sans Mono",ui-monospace,menlo,"Courier New",monospace}@font-face{font-family:"Square Sans Text";src:url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Regular.woff2") format("woff2"),url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Regular.woff") format("woff"),url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Regular.ttf") format("truetype");font-weight:400;font-style:normal;font-display:swap}@font-face{font-family:"Square Sans Text";src:url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Italic.woff2") format("woff2"),url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Italic.woff") format("woff"),url("http

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30768, version 1.393
Category:	downloaded
Size (bytes):	30768
Entropy (8bit):	7.992993408701693
Encrypted:	true
SSDEEP:	768:s3jezTHvXb8P4N9XR9HmNpctU+VXhjV575Z4Z:siHYP4jWNpcu+VXRVCZ
MD5:	2344124773C71BF4FA4AD407E7C3A467
SHA1:	3394A43AB1EFAB8A22A1F07222F7F02A9E12CBB8
SHA-256:	BD4D2E29F503390E4951AF9232FC43780B43D349647188D8F3F600835F16AFB7
SHA-512:	DE4B119B8262A67FFD420B1E8810A150038D8AFA68EF69127292C0A0043312B3B6EB578B738BE51FE2380E2E4C1A8DFD647B7D684CFF1AE206716312ED3EC0B6
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-medium.woff2?1713982826
Preview:	wOF2......x0......I...w.........................?FFTM..Z...L..J.`..6....s.....p..}.6.$..`..r.. ..B..u...?webf.[.)qEt.0T..m...x..G..c.....o,......5p...WG.g.....4.X....(._.Up.GH#2Q+U.>.D.Fl9.F.}F...N..-QaS......?.i..r.i....aN.iN$f;...@.J.t..".mdC.....\...E...Q....^......o...I."..)^I...b..\|.mr.........(...+....8.\|.#....6l/.7y....a...P....=.............,~.LnO..8z....O.y..^..\.&.r....?e.!<....t..$..$..<s2.)....P.;M...R:..(S....:..s.O....=N.Y..8z.lm...E..J...'6]3........\.t..5;...Y...........H).`..b......(&zK..]#.^...n....A...Y...+w.N.i.qkf9L.e...Le...b.T..\.C...........K.UI..>.<.6...%..2.3...A...c.I.S....3N.. K=.4.....t...k.....{.U.UX...C>.#fs.......4..1....z....x...y.h...z\|H.#...p.-.H.Y.p..P...._..F....1.....U..yQa.n.e.yX.....s^......_...s.#....x ...1.).0...S4.....G;W.Ae....{..6.A...Z5vW8....=.L.+D..Zy$d.=.. ,A. .o...,Upb...b..d.{..m..$~.".\|U...t.......5..3...i...#uO..e........."._.=.KMFDn....@.k.@i.......k7..}".5....ACy..P.J.@..9..wW...ny{....g$

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32604, version 3.393
Category:	downloaded
Size (bytes):	32604
Entropy (8bit):	7.993122989472145
Encrypted:	true
SSDEEP:	768:VmDivi59g7yrc8iKAbXHLk6cWPOHflfmMxSH3U:VmDuMg7yr4lzHzrPO/lXxSXU
MD5:	B61B564A07D65D68488DE3231BD0AC7B
SHA1:	4A2C6F4AF43F8C9BDA667D04D86ADF5CE8D68965
SHA-256:	7AAD8FA190F4B44090CEF42D194EBA8E6E474EEDC61AC8312EB05ADBFD3581D5
SHA-512:	34D652E8CFF33377322C56890FE15D2E16C5F690E137B2D01304801EE629D5CFA44D33576D088B325194E86479CDD128A12CD114D69DB6A723500E2986D5662D
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-light.woff2?1713982826
Preview:	wOF2.......\......it..~.........................?FFTM..Z..z..J.`..6....s.....L..E.6.$..`..r.. ..6..u.r?webf.[&Iq.9w_.....R.g.+...3.7.L.........M..c......&..3.0i'.P....Ld.4,!.......cO8..w..u..5.h.Ju.C.W.'{.`B&qR=...'..o..PH.2Ysg6........vr~..YZ,M..{.b.G.a\.H..tdH..&..:M.`...,Wm.9d.Gq\...c.%....o...<...u..6..[...>.....5.16.V/...Z.2.^?.....z-.{.5..3..{...\Y.k.....B..JC......_..5....L-.'...6...3.1.0.s....F...F...+7c..K...n...._KKc3.\|..~......].Gjb..S.0../..~.~&u...*.->V..,...n.W..6.V...D}D.g.<.B..........Z.;...43.F....-...Z.....-.Vl...`......h..b.......Q..o............aR.G..N..+.hi........h...HI.h...IT.I.....~...........=W.O..u+../.."W..?..Q.w. ....?. .. `"/;......N....?w}.L..J.......e...E{.....>....`.G...v.....h..Z.......&..-Y.-.5.......`.z......n.2.K.E.?.c.u0.....O.......i...7]........)............n..#.?_#1..3".6.m....,.Q....v.......[...8......P....e...W^.r.....k....?D.uO...1.A.v.%.......C..%.O..C.bI..\|R....L3S.FC.)rA.B%.]..=.k......hp. .q.[.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (978)
Category:	downloaded
Size (bytes):	8476
Entropy (8bit):	5.304742837086441
Encrypted:	false
SSDEEP:	192:KJSGBcfUYeAFowZ5a3RuNE+C7Z8kZBxyiGcDSrl14BzxrPScf6Yj:KJS7fUYeAFowZ5aAE+C7Z8kvxyiGcK+B
MD5:	D66CB55B0579620024A9CFB777D42BA6
SHA1:	682068F81023A1AFE8C610C92274D13FE67DC0AF
SHA-256:	1F9AD80950EF18FB53E0A17416A8F0B50312B436488B5F4769916863CECC0FA2
SHA-512:	CC16364BA9153AC7E61C7BC05DC2E4BEA54C29E8F3E8BA67C664FB45F97ABDAEDA8E01D90AD96A1F46532C49CE189412E2060505501953531D5EA91844633649
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/infowindow.js
Preview:	google.maps.__gjsload__('infowindow', function(_){var UO=function(a){return!!a.infoWindow.get("logAsInternal")},LFa=function(a,b){if(1===a.Fg.size){const c=Array.from(a.Fg.values())[0];c.qt!==b.qt&&(c.set("map",null),a.Fg.delete(c))}a.Fg.add(b)},NFa=function(a,b){var c=a.__gm;a=c.get("panes");c=c.get("innerContainer");b={pl:a,wj:_.fC.wj(),Su:c,shouldFocus:b};return new MFa(b)},VO=function(a,b){a.ah.style.visibility=b?"":"hidden";b&&a.shouldFocus&&(a.focus(),a.shouldFocus=!1);b?OFa(a):a.Mg=!1},PFa=function(a){const b=!!a.get("open");var c=a.get("content");.c=b?c:null;if(c==a.Hg)VO(a,b&&a.get("position"));else{if(a.Hg){const d=a.Hg.parentNode;d==a.Fg&&d.removeChild(a.Hg)}c&&(a.Ng=!1,a.Fg.appendChild(c));VO(a,b&&a.get("position"));a.Hg=c;WO(a)}},WO=function(a){var b=a.getSize();if(b){var c=b.Jl;b=b.minWidth;a.Gi.style.maxWidth=_.Ht(c.width);a.Gi.style.maxHeight=_.Ht(c.height);a.Gi.style.minWidth=_.Ht(b);a.Fg.style.maxHeight=_.on.Fg?_.Ht(c.height-18):_.Ht(c.height-36);XO(a);a.Kg.start()}},

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	downloaded
Size (bytes):	42042
Entropy (8bit):	7.907166066560644
Encrypted:	false
SSDEEP:	768:yC2IIKVOyVilrngJn0Xt/ID5ld4ChYCPBw92x3ppQua2A6gJsuh:y0VDVilng2t/87dACPW9apHa96gJz
MD5:	49D6A41F7314850266535C58724544CE
SHA1:	6E4D2C8857C5BDF86332BC07DB59F216C7D66EF3
SHA-256:	17DAF1EF3E01A69DCD30DA04ECEC05CE333940207026CE06C7C2E1EB6BC9FC4B
SHA-512:	DA6337C4026C17E4F3F67C3D4DE4201938F7B0D2F7E522001AD99D5AC1C42F673C2CE94C49BADE6BBA91164E5C00E6A9777AB2C232C586EA348FF8C57BDA6AAD
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-two-page-1.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............7....................................................................S...............................................................................................<.:...x......n.......................x.WN......#K...............!..i.L..F..S...u989#..1...fC..%...f82.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6426
Entropy (8bit):	7.928748497025203
Encrypted:	false
SSDEEP:	96:Ae4TVqqacJz8OgyOfHCssrZpAjra6l/BkV0fjkBU6STM8c+Sqxt9DlkLN:AeUgqaeOvKdiSSpkqjkBRJ8qqx3Dlkx
MD5:	611DD0104816D4B4BC35751A91A64568
SHA1:	36766CF14C3285FCEFD2E700D430B6837571D4D8
SHA-256:	CBD38122213A5DD5A1F03220CEFCEC3F2D4F1FE91855E16800E45406C7033B15
SHA-512:	FA822A4308048C4395C694F7608818C39679CE7F0C32777FE44CC259D1B1BE01995500EAA63E9BEB2673AF854ACAE4A7BEA46AB521D3B6B68BDF258F4D4D825E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30309!3i18995!4i256!2m3!1e0!2sm!3i690435417!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=23325
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.....................y~...................................................NRV......8ehl.......T.....K..&.....o.........].....rl.C=.Z......6IDATx....b.......@..=[....zW..1`..i.\|.1..4M..H.e.&#...,e...'..g..K.~o...$A.\|4...a.a.&i.h..H..$.=..G..p).........>.#.j..uD.....6.3..K..H.._,z`..Ew..6.....l8...c..:....:............:.....8H....5M....(..N.A.....`....\|Y........8S ...FA}j.a`....@.f...C'.j....f.l..>`;.....(80.0\|a.l.>..4.....[w..y..A8..X.Q..T.+.f.f.8V....T..4.F..!...h.8N..]o=.B.{A....3b.u.F.....>....I....x.N...D.n8.4hw:8.K.e......6....@UL...6..=....m....Q.P..f.S\.2Z....L.P..b.V...Ak..............M..h6.. ...8...g.D....._.*fC........X....%.. ...J....c&..,...^8}.....A`[.K......K.n.l.uW......./.b.\8 ..D..\|.q.....sA...@U...r...D..u............p....Lm....X.\|. .a.v^7....$.].5.G...l...6J..j.1.\.X...6.uj.e...@.....gz....t..v...L.Y.m.v..,x.l......\|G...(..b....x.?..Qh..^....L.....\....O.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1503
Entropy (8bit):	7.049556875299597
Encrypted:	false
SSDEEP:	24:o1he91Wwjx82lY2T3o5VxR4VY7ka4Vb2yJ3VF4Vh7ks4V/GvdDna9x3fV+ApDykn:mqQNn2qb+X3BJ3kWR/ehaDMApekoHBPs
MD5:	BF44746166051D064F5A2DB87A22C628
SHA1:	9A423C1458626A74F4468DB69F3452FF99FB8477
SHA-256:	835ADFD60E0AE3BA5027587907BB88E735C33324E484F07EA0BC9B257C2917FD
SHA-512:	452100A287FAF60F377B6498B904A856192784EAADF2A420E9CEE51B919F7CBB333BEDF6D41E1F7CC2FE5DD89DA8101BC5A0E6B8DF946C70F5F6FB44D45F4E3C
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/radio.png?1644377169
Preview:	.PNG........IHDR...B.........tKJ.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:258E7E61FA2011E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:258E7E62FA2011E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:258E7E5FFA2011E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:258E7E60FA2011E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1./0...QIDATx..1k.@... .g....b.;..R.nB...n.......NB..N.....K\.7..3:....5.....~.b...w..r.].q.q n..T...5....M...R$.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1690
Entropy (8bit):	7.27713716142832
Encrypted:	false
SSDEEP:	48:cxqQNn2qYSgBJ3r7n/c6x2zFcFA3Ksw2qbpgr:VY2PBCF0Irqmr
MD5:	1F045450638098444665375FA5B56412
SHA1:	63E737FC94C7AC3A9EDAB9259FC052E6BB46FFFD
SHA-256:	BDCCDE3F44F13B0314FA16E7370BF4752F3615D9CE74884E03952B4FAD35F866
SHA-512:	6F8E072590B1FEA4E22DE42AE4F3A8C4D02361F7FC37B6B2F7F60957CBBED3538E46840087ED0D0BBC6A39834E2CDCA8BA9C76407CDE1DA072F6A2D83AF6EAB6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/calendar.png?1644377169
Preview:	.PNG........IHDR..............\|.0....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE5FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBE6FBAE11E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1EE4ECECFA5211E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:6326BBE4FBAE11E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx.UKK[Q...\._.Q.y .`...[...,.+!>.(."..q..Z.-.nJ..]XH.E....&-.....7.\|.1...L.}.HL.-....s.........D".

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 401 x 387, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	165660
Entropy (8bit):	7.989708552287887
Encrypted:	false
SSDEEP:	3072:Vk08kwFrPYAkOzL0RSJV53iTsrM3adKLKM/3rWLkS8fb1Gn:VkRPrPYA9nNV53iTsAqdKLKs3hhT1Gn
MD5:	7547236310EABEF905F40EED8A1A5997
SHA1:	C0CF8ED3AE56E4BB0CE3CDC3C08385054AC9CEC0
SHA-256:	D81371654521767E6BA8A9739633A1897D401E6982378A689C403E02B3E31240
SHA-512:	89BDF0FBA86F569346BAFE9856C9296F32D4FB398F5CCCE378144B0FE799F45729CA918A59B2B1ED1ED1F4581BB4E286A87E754CA00F4EA1A47351F6E27876E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............?-.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........o.d....orNT..w.....IDATx...W.-Y........o_]3=.c.c0......."..P0H.BOz.^.Bb...^..R.H@.I.......L..X.....Uuo]..9.l..k-=.\.3s.}.5e..wc..d....s......?.uGC...O,..!.1...{.8...:....L.....?[.......yx..x.1...Y.1......;.2..\|.x<f>...g.[^J...!T.{......cK).Z..B.......@)...F..,>w..~.X{\'...Pk..0.k.......J.\.}..z...4.w.a.-..TD...,...x.1..X.j..9K.;.6.~.n...b.T.#,.W.Vr.uY.^R....M..\.V.[...k..k..1Xk..f8..N.K....H...T..(M%s..$gr&?"..b.)..HP..E..I...'...@..}S)-..t...=.......D....?..Ng......!.x.p.........DV/....\|...\|..._../..>lK.8........!..8..4..t..\1.6B(.(...XPU.ex.j.i.].(..E.......U.^.C.+k.&cqX@....%%..7U....lz*.!.{,..c%...+s........9.3y..QRz.c.X....7..:....].....$......J..iH..}.<....+l.5.w3!...pA=...O..~...a..y.zduo.......9.3y...Z....+,.BQ:g.......p.?<..a.......q...:&Yv...)+.....\|........H3Gr....q<.zU.n...#D...5[...

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31995)
Category:	downloaded
Size (bytes):	66949
Entropy (8bit):	5.347341158043117
Encrypted:	false
SSDEEP:	1536:mmuqlAT9wYZif4pPHnvL6EVnM4gX4FPIBx4tPJnw3+X1paTXZ5rWGdV4TKu/:HR4osPYtB4Tl
MD5:	BF231EB780489FFFEA00AEF444500B14
SHA1:	F0D4603FA4441A3CF3773EFFFBDA309001C579B0
SHA-256:	95EF911FCF12DFE0A1FB5B17A3B24FA81C6B07B102B435949B06E7E124DE51CB
SHA-512:	06CF250E2969A01549C9920CCC47B85BBBFF773AB68FE7D22BDE8C58850D4091F1702D983457847855F42AC32E0C78398B05CC005410393682D97AEB28D41877
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},F={},C={},T={},A={},x={},I={},M={},P={},U=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},N=this&&this.__assign\|\|function(){return N=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++){e=arguments[n];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])}return t},N.apply(this,arguments)},L=this&&this.__awaiter\|\|function(t,e,n,i){function r(t){return t instanceof n?t:new n(function(e){e(t)})}return new(n\|\|(n=Promise))(function(n,o){function a(t){try{u(i.next(t))}catch(t){o(t)}}function s(t){try{u(i.throw(t))}catch(t){o(t)}}function u(t){t.done?n(t.value):r(t.value).then(a,s)}u((i=i.apply(t,e\|\|[])).next())})},D=this&&this.__generator\|\|function(t,e){f

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.216478854650569
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+kxl9t3ll/sup:6v/lhPfA/Ukvjp
MD5:	8327A6037AE00A5BE9F75E63EE1B9FBE
SHA1:	A812C79B0D125E4946B33446EAE0353F518627E2
SHA-256:	FE67E12A6497F8518EF1673FD8CF5622871935FF85F204715E78B2009DD48588
SHA-512:	EAAE2B937F3DC48305AC697A791067902360861244832024A84FD32F8E608CDAF9504C63FFF49B6DC06153E6B0C797C7C013757845619CDF0FCDB32975C9CB72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c..........(.....IEND.B`.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 186465
Category:	downloaded
Size (bytes):	33650
Entropy (8bit):	7.992314121426954
Encrypted:	true
SSDEEP:	768:EC3pjZEASvidgChAplLA9YJ0owjCtTT1dO63f:EC3pjZElidgJaeqoks7O6v
MD5:	D6E1430CDB7701A629134EAD34FC29F5
SHA1:	9A6D0BE9E35CA64E87629CA5236089CF1CB10077
SHA-256:	0339DEA287235E5CAB1D628D2BFB5D83B46DEE3136AB186DCF73D5B7DB9679EC
SHA-512:	27E4B49C02C4A2FD5C0DB6304DE4567793F5F27B1772542048A715766A98EAD839BFD01AC234360CCA88E0D09D84787217D087FCFDDD232A3A6642A18C8F4E64
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1644361842&
Preview:	............v... ......woW.X.]r...l.t-Q..k<..$!2K.LV^$..Zk^.....8k...~.?.?./9..@&2.L..].....d .....@ ...~..Z.7.z..F.n0.z....>...?v..2m..<.. ..ysu...Y.K.(.,.......e..../D..4YIR1..A.A.k.2......._...."I..w.u3?._.#...k...y..8.=....{..S.\|..?`s.......\q..5.B.......m..+...>.K~.A..E...I.g.=..i....#-./....{q,&.q..Q:..V..=.. .L.l$.4y.~.en......P....o.h.2..Cx.._...P..q.=...._..>..'......3...............7(.......]._>k...>.?...{...'.{.U..x......z.n_..."N........a...d...%.8...Q..A....z....)..A.....F".4.'./.~..?=mD.iCr/....b..S.'..f...gb..&..X.@z.(L.3qm;.H1.Y;..QQ.H.....J...J.3.69..j...^..Y..B.._z..?....Q.5.....P..W/....9.5.I.....j..d.'I'..S...>TK.Qd(...C].\=8...........K.\|.;~8.R..j.?.r.@...H.rkE.}.w.^.9.I..Tp.Q.{.Enum.e...d..g...a.Av...@te@..y....T........<$0E...;..2.....L..$...e.K.5....v.84..~..._........Q........{.p.%.....[..R..).....[.C......(...&.L......Z.A.6....O30...T..&...^S.7...(K.4".t..I.K..}.UX...:.x..1D]Ws..3..B.^=z.QPU....L.8S......;.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 217x224, components 3
Category:	dropped
Size (bytes):	6356
Entropy (8bit):	7.922155289361046
Encrypted:	false
SSDEEP:	96:2j/PvoQJ0UxA80P7H4OGq5EfT81uDBk0JFn/kcFd2F0s+InwQt5d6T:S7ij8UHAu2Tiu1k0JV/kcf2Fp+Ixd6T
MD5:	24AEBB4BA7B4C5DA41B007727013D4D9
SHA1:	2ABDA6F19C316261C32F5CC95C1C94C001AE192F
SHA-256:	93CEB9096C4F61B2A34018171D48229F18DD3231CA90C5324BD3E20CB36664CE
SHA-512:	1E605B3E440858529DE73FF5D1A47CB2BEB666352944C15C6C99BF1D09A1D5EF27D31BEF76FF324C584D36D1101B4ADF6B6DEE979FB1EFAC1C2117501269877C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................B.........................!1.AQa..".q...#2BR....3b..r..C.SUc....................................%......................!.1..A"2#Q3Ba............?...%.T{$...n.[.]R.....)r@.zY+.@.Q=. .)..4$7.KD.....@ tF..$.B.#m...r....%...].!m..]..J....H............V...YB.e...XZ.+QQ..../.Dh..I8.....$..D..l..)...k..B@tB,`....H..c-.VN@.#HMOM!..!m.......%a.8..m..Y.j...P...]+ .Sl..5..#...G....D.Dh..u@.....!@.!...[k$.6U.2..'.0....:.C..$.../y.@mq\F.2.J...C[...r..u$..R`s..]4b'..3.e=.7^N...O.......,.k<...h.mq...)..u.XSi.EN.p.k[.....FR.._v.;..O[.-......9.)s...F...k..s?.jx'..8......e4.sX.[r.....yx......\|.9j.+i...K"hpq,hv..I.e......1:..h).\.\|......~...9...%.'...)..#..R.._.....A..c.W<......h.B.4.2...{ZZ...;...%3.&....1.?.....&o6.N..i..........$...J.....;....R). l.i.V......I...J.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	14141
Entropy (8bit):	7.964412649482339
Encrypted:	false
SSDEEP:	192:sdEG+IHQQO/ExoKcei7NmaXeAGW1UpKktozypwo+DzOEWDoylo4bEHnxIFruU9AC:syHJ/h5ei7cYytao+DiEv+EIrL9HPL7
MD5:	5FE641DBE0003D23811DE47ECC4F34E8
SHA1:	5E02318AF651EA59F445071FC5AE783A5148B3B7
SHA-256:	EFB4AACB655702229406D646230425A0AA39B6EF517ADB812A940B0394DAC9C8
SHA-512:	AC342E69A38F2FE3BDF546E46906AC16CA6708196D5B73471ADBD17F1D0F2D0668B0F939D217C891A198D547BCA5B68CE9D045F2C9B3ED34DAE7F228D088C309
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30307!3i18994!4i256!2m3!1e0!2sm!3i690435417!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=79788
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...........................................................................~.............puz......Tnz...i......y~.t....._w..J@....c[.}v....=3..........0%.g..g\S.. !$.s.=.Zx........6,IDATx....z.H...p..Y.U..........CR...u...g7N$.&0..AQ.@.qb.F..T.[...\|...-6.PWV..tnX'.k.F..v.?...S.?4=g.q}.....pfi....9..A.w..:T..n....lQ..(..~.......`..OmU.....D.m...../..x.9.}-.tI.%'..h..~.....u<%.............r!...}...b+.Z2.o..&.a8Z.....e......Xc.......J415%g.l....F..LP...<PU#.....(..\|3.........1..N...\|.X.:...fg..`......3%o...'].A.qe.)...P6...R..r....;.m/7..y%I.O%.t..n....n.@0.L..:m.-2.6.....16...J.....m.8.......L.2.>.......6N!..vTue.G.@I..j.'.-....&.hk.O.....gg..0..6..^.w........+..{^s8;\|.6..&..q.%... ..6..)....hG.tM_e...?@..vz..N .W..=zi...1FQ.D.~....j..5Np........f.W.....D..z.\.@.....!..Q.q.w....p.....E....q......\|"X.4\........J..e.uY.1.%.4...RW.x.y.....8....B.cg..&.q..W..4.xxP.W.z.^.h...@..I.(...@

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	181
Entropy (8bit):	4.0342726381492575
Encrypted:	false
SSDEEP:	3:A0lAXLELnDWRgXWXaXAoL2j03WFjJ48yqQUVWR7qScDKl0XZAQMWF9NAqVuMQL:A0cLADWRgXh1L203OTxBVWR7qa0XsC9e
MD5:	96F47365DDE2CF92C668B15D0142FE7A
SHA1:	479EE0D255C4797B13DCD04199D26140BE68CA9B
SHA-256:	4CB5E2A524C836D001836A7CC9F63F1462A6186DA510FC62C60DE06452F823C4
SHA-512:	F42FB2471B79065F156D49B6BBDB84971BB7BC55F9D4203F33DE24EBAD32A2B3B97D3C963F04F1A2FEA345D7ACB944535AEB9853DC1D3E034CA17F5A589FF431
Malicious:	false
Reputation:	low
Preview:	500 Internal Server Error: The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	7.97219899580382
Encrypted:	false
SSDEEP:	384:T7Q18/1nOF5P82ukPTGGZJexIqppXmsJMv8+qIayCtPB5fc:fQ189+P82ukaGZJexJpRmsJMv6ltPB50
MD5:	35C6B711316A2C02D926909852F6494A
SHA1:	1A3B789544780CBC61613EC2CB872A633D280D21
SHA-256:	34A006DC42B7816A7819C0F56DF18AEEE8869019B4550D4449E0DDBDB0595E33
SHA-512:	284483BFA04D8A48DD45FEC5A2A7BF709FC7D5BBB86A021F5FC0177A1861D8E43BEA95BFA6B9224D745B674E3F0B8DE08D5E30C6037E3394687A42F6FB56D405
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30304!3i18995!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=48080
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.......................................y~....puz.....................................................................n..Q.iv.....'.E.....8..J......].....5.Q..8..WXZ..{..%... !$.............o.......C.]......../2...<=?......4.S=.Z.....<.IDATx......J.6...Gq...[__?..._.^...0..\|..}....!}uwyU7.I..1W.>......)..j{....7o,C^&..j.=...z.~.f..B.;1..1....S2W........d....5oN._9.E-.......F..j.H.....aj.,.........d"^5..z.;M.10_......l.u.u.._'Ew12W....5.?.'O?..V....Dl......".^....Q.T.........v.L..!....Z...9..d...q..z..a....f....N.!^.WM.y./..a..yf..v..k......4...aVy^.x..._U...&V....A..S...n>..7.HC,..}../..f.....<.._..V..(..0u-V.j6^....&B..c.HZ.7H....G...w.5iB.y..dY...^...0...z0.;.~8.....+........B.......ok...bdd...E.8c... ....6.Y.@.}K3..d .:..^]....;......\|.R.x..q{w..../..0./.^..;......'.....m2R3.$..L\|L...r.vy&7L..2.w+..F.........oU.W.5..b.d.%r..U.@h....t}.....G....Jr....YVo...7.\A..;..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29044, version 1.393
Category:	downloaded
Size (bytes):	29044
Entropy (8bit):	7.991343740865886
Encrypted:	true
SSDEEP:	768:Icicipn5NMk6SCQvcQr0TQLQzyR0GPkripVjh+zojeJ:Kp15ufSTzHEaVsqFKB
MD5:	84EBA500A4EC29CCFADF1E9BFF16B67F
SHA1:	9A2CA6EDB41BF74C472FB8AD8AC7C54E62AC7A1E
SHA-256:	229EC17324B239127841118369B6BA49CB6ACBC054BE11DD6B27E68C115565C7
SHA-512:	D616A0236301B5A454533C41469DDB22BE7EF134D5233424535EBDE352E2E078A4E705507BDDC35DDBC021DDAB18124230C1A3AB7AC683C7901F9345F0F28C38
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-regular.woff2?1713982826
Preview:	wOF2......qt......;...q.........................?FFTM..Z..X..J.`..6....s.....l..r.6.$..`..r.. ..P..u.r?webf.[..q..m/........'....J.X("...n..7\|.k....&.9.N.Z..... .....m....@...j..DE^sUV_l.nA}xN75.,v.-N.T.x.....A%.s.......I\|j.`?Z..Mv...9M.LW..Q.u..q~.q...m#..]..3.....bJ.+.x.M \|. .?..U......y(SZ%.S...b..?z..].:.W...R..Y........}@..L.\2n....[...`I..K...<..7.lD..c.X..Q#...e.CF.....9Q".a..8#.,.+g...w.........:......Z..%.\|E.....<..A..Q91j.....vl.k...........X.Fb...(. ....Xq.O^........3.B.t}.O.f..JJ!.n....Z...6....U.=H.\&M.CGZ}...\...D,...C.>.7..(m......lk\|..35......r.B0x.I2.`...O..\.(..RR.W.Q......E7....n.t..h....8e...O.....?..Hra.{....U...-..$..$J.cX}.......0O..^.9...L.J..q."s..~...c...}.+.h.C..,Myd...EP.f....^....ii...9...A..n.?.....Kf...].R...?0....k.."....^...,.Nn...D(....\|..#....'.>L..?..x.hL ......6a.CU.U......./;.....\.j..$..Rg...Hz{........vz. gg...t...@..B.02.d..A.F.8.....#...... .!.{..>...>.$..Ck......y..i.....\|J....;".ti3.B9?+.....^..Co

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/settings?session_id=c132cda7c95d2be522ecf39493ead7e166a38495
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1989)
Category:	downloaded
Size (bytes):	95506
Entropy (8bit):	5.475605541158834
Encrypted:	false
SSDEEP:	1536:gNXs+smtbj3zts4MHCZP8RHfAqedStAZWUVC/YPQrvm356GvnnzGa5MFh8FW8m/k:gNXsXmtbj3zts4MHCZP4AqedStAZWUVz
MD5:	181AF43251B354F46E7EF8191E61D9CC
SHA1:	95B2B82C31953E25BFEDE8318058B41F4F79BA98
SHA-256:	B3F4CCAC25D3EB29E29B5C1DC37D36B07CC088C3E65FBD4925EC4258326A3798
SHA-512:	8A0B7A96A620A47F1511DB5F5D2CDD3B931867474A23F47F82156D054EA5A0EE49147CB0666294935930EA3E45BD0CD6DF466B1227E8227453BE152187B61901
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var zya,$M,aN,Aya,Bya,dN,Dya,Eya,Fya,Gya,eN,Iya,fN,gN,hN,Jya,iN,Lya,Kya,Mya,jN,Nya,Rya,Pya,Qya,lN,Tya,Uya,Vya,Wya,Xya,Yya,Sya,oN,$ya,Zya,pN,qN,bza,aza,cza,dza,eza,hza,rN,gza,fza,iza,sN,jza,uN,vN,lza,mza,nza,wN,xN,yN,oza,pza,zN,qza,AN,tza,rza,uza,BN,xza,wza,yza,zza,Bza,Aza,Cza,Dza,Hza,Gza,Iza,EN,Jza,Kza,Lza,FN,Mza,Nza,Oza,Pza,Qza,Rza,GN,Sza,Tza,Uza,Vza,Wza,Yza,HN,$za,bAa,IN,cAa,dAa,eAa,fAa,hAa,iAa,gAa,jAa,kAa,nAa,oAa,lAa,tAa,rAa,sAa,qAa,JN,uAa,vAa,wAa,xAa,AAa,CAa,EAa,GAa,IAa,JAa,LAa,NAa,PAa,RAa,fBa,.lBa,QAa,VAa,UAa,TAa,WAa,MN,XAa,mBa,KN,NN,dBa,zAa,SAa,gBa,ZAa,aBa,bBa,cBa,eBa,LN,$Aa,tBa,xBa,yBa,ON,zBa,ABa,PN,BBa,EBa,FBa,Hya;zya=function(a,b,c){_.pt(a,b,"animate",c)};$M=function(a){a.style.textAlign=_.fC.wj()?"right":"left"};aN=function(a){return a?"none"!==a.style.display:!1};Aya=function(a,b,c){var d=a.length;const e="string"===typeof a?a.split(""):a;for(--d;0<=d;--d)d in e&&b.call(c,e[d],d,a)};Bya=function(a){return String(a).replace(/\-(

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62323
Entropy (8bit):	5.411471471310117
Encrypted:	false
SSDEEP:	768:/i2Ve3JXEZSNGhsfQpWWzlc18sQJHoQqhF:gBU9Dzlc18sQ5SF
MD5:	41E74CBE9AEF15A5CE1A704D0D4BE82E
SHA1:	019EDB948B551FE3458BCE3C78D1BFDE388FF02D
SHA-256:	70FD7F6CED21739E10103744C72ACDFC8E8422502D74D4FAD2DDFAB3AED0BBC5
SHA-512:	0E609EEB7E7E5C6A17AD84322EEEE8632A76A6C1DA84141C6DCD2A5B4BB316D128ADDABD9EC727C33368E197D966480833365419FC6F1AB9B0D831E3EA48E374
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202301.2.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 277, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	418549
Entropy (8bit):	7.9795855722462585
Encrypted:	false
SSDEEP:	12288:wun5mzGGvWP9vWZJmo9//RQDGlt6RVYQ3tm:Xn4HtxyyGRVYQ3tm
MD5:	64CCCE51A2CDFDF456B9E27FDEBE61A9
SHA1:	5A66A8FC5A9ECD6BF89F622ECA1ACBA09BC38370
SHA-256:	D0AC970277C573254A3D9E81E73E0C1385868BA193A29BCE56047CD737269E81
SHA-512:	D8AEBAB1AC66EC1451C0B6714DE7752ADD7A19BA756F2BCC85D82AEE1ED2E181FE8E6D4A26F3B696B90F5F1BAF50E95C7F561C65EAD5BD4B7777F3C77A6DC9A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s0......sBIT....\|.d.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe Fireworks CS5.1..H.....tEXtCreation Time.11/29/11...w...IIDATx^....[z.={....w..[.y.e.X...+.......HQ.....). ......C.eLa.p(c..c.e..dYC..{.N..3...{...~....s[..L....w..].z..z.k.\.b..j..j..j..........=u..O../......Za.._{..n...^.A......I......M...._..^...i(j...7~.\|...?./...<k..R..Nw....o]...\.....^....<.K.Y./..M1^.gB...GI.86&E..%.a.].....:.?M.....O....IyYF.?/.Am......n..WW..g.Z{....2..i,.3.Z...Q.\|.agx..Y.m..].....C.~..k..V.W.-3...wI.......o.-.....X.Q..F.....a..'1..c...g.$..F..F+..:y.......(.s.Mb:o.d.....w...F}..n?..>~.Q...j9.>.7}...E......G.T.:q.......,.+.ge.'1...h:!...A..~.8&..q:.Gw.........V.....Nc...b....d...f>..CTV...(d.3h....r....Wb@^...'.}4.;.y.4..Y.......... .Z<......4a\.A-........n{...l~.......1].....y...v.A.O..../..J...?...W.O-..,...K.k<.g....]> .S..............a.h..7y.r5.+.&..../\|...[....f...6...E?..\|Fr.{....e.....j

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 1100x777, components 3
Category:	downloaded
Size (bytes):	107393
Entropy (8bit):	7.979290648706653
Encrypted:	false
SSDEEP:	1536:sQjLYaMQ/UV2tePeYk4LJNRkhZBiKI/f6gbWTAxry8d2hXYQ88RqMA2Jlsas3vA:sQnteGYbLJNRkhXk/f/a0xr/2diylwvA
MD5:	2453F8EC1EAFCC298B1380B732CE7CC7
SHA1:	DEAE3FF46A54444E7F73E252315764C1B00A9969
SHA-256:	DB2766550EECE9913775B21CE4F796D0AC6BBF748AA5449FE126CF6E8066F67F
SHA-512:	F4B503A03700BE099D037D4530008628031215143B4528932ED182212E36E0338BEC3C3B59263BBFB3165BFF32E3F07AF7BFD3ECDF62144F695576B085FBC8A2
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg
Preview:	......JFIF..............Exif..MM.*..............................i.........>.............................\................2021:09:11 09:20:06.......................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........L.."........................................V........................!1.AQ.."aq2.....#B...3Rr..$b...%4Cs...5Sc...&6DTdt'7u....E.........................

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35043)
Category:	downloaded
Size (bytes):	149004
Entropy (8bit):	5.342563560316058
Encrypted:	false
SSDEEP:	3072:FtOAq3knoLJJtar7wLYTIY8BmHV7U2QnpTBFNazNaJ:FKknOJJc7wLYTIY8BS7yeNaJ
MD5:	A3D2C5F139C21BC84FA435F2252271D3
SHA1:	636D71DBB5D9476A55E13918E2433C59127A8D8D
SHA-256:	82F9C09F55FB89DA42576E7C4DC75D1A41024C46A6F9FB1D2BED07360C1CFD6C
SHA-512:	107D5B49629342C60F426E77712F46AAF4266E8D58A9EEFB77E158DD90B6FF3E6179E60B709EE62A43188C5C2F3349E5A02E64CB3B979DEC654F94D68DC82365
Malicious:	false
Reputation:	low
URL:	https://cdn.sprig.com/shim.js?id=mVfPI-96JuPi
Preview:	.!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="c434f151-9369-5109-b3d0-7a19293ebf9c")}catch(e){}}();.(function(){"use strict";var Xc=Object.defineProperty;var Zc=(le,me,Fe)=>me in le?Xc(le,me,{enumerable:!0,configurable:!0,writable:!0,value:Fe}):le[me]=Fe;var V=(le,me,Fe)=>(Zc(le,typeof me!="symbol"?me+"":me,Fe),Fe);let le;const me=new Uint8Array(16);function Fe(){if(!le&&(le=typeof crypto<"u"&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!le))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return le(me)}const G=[];for(let e=0;e<256;++e)G.push((e+256).toString(16).slice(1));function Ks(e,t=0){return G[e[t+0]]+G[e[t+1]]+G[e[t+2]]+G[e[t+3]]+"-"+G[e[t+4]]+G[e[t+5]]+"-"+G[e[t+6]]+G[e[t+7]]+"-"+G[e[t+8]]+G[e[t+9]]+"-"+G[e[t+10]]+G[e[t+11]]+G

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUk4lmfpse:eBse
MD5:	377D257F2D2E294916143C069141C1C5
SHA1:	B7CAE69682CF31DD670B65088DB8395ACDA6ED3E
SHA-256:	AC8778041FDB7F2E08CEB574C9A766247EA26F1A7D90FA854C4EFCF4B361A957
SHA-512:	01211111688DC2007519FF56603FBE345D057337B911C829AAEE97B8D02E7D885E7A2C2D51730F54A04AEBC1821897C8041F15E216F1C973ED313087FA91A3FB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (827)
Category:	downloaded
Size (bytes):	11711
Entropy (8bit):	5.136675710399498
Encrypted:	false
SSDEEP:	192:pTEii+jvq/L1qjuGNS7h9ImJuwi+kwi+Mxk9i+Wwi+18G5f0err:pgu5KZh+TGi40err
MD5:	08F16A1E26CEA057D20680466DB38C2C
SHA1:	3FC7B9691E19D994B5E9BE302A18FFFA95F568F8
SHA-256:	686977E4856173F8AB85044737BE35353C8E84821672B42872C938B9FA296AD6
SHA-512:	A4E1B7FCE7A8688097F3C0FF821755456E4CE6E0C24EA9DD66376122AC52911355E2136A26C5A5A7D0D510AF63DFC7E5BEB9D678493C9ABD558567CD38634709
Malicious:	false
Reputation:	low
URL:	https://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false
Preview:	.<!DOCTYPE html>..<html>..<head>...<title>Google Maps Output</title>...<meta name="viewport"... content="width=device-width, initial-scale=1.0, user-scalable=no">...<meta charset="utf-8">...<style>....html, body, #mapContainer {.....margin: 0;.....padding: 0;.....height: 100%;....}.....#mapContainer {.....width: 100%;.....text-align: center;....}.....a {.....color: #06C;.....text-decoration: none;....}.....a:visited {.....color: #06C;....}......gm-style .gm-style-iw-c {.....border-radius: 0 !important;....}......gm-style-iw {.....text-align: left;....}......leaflet-popup-content-wrapper-left {.....width: 50%;.....display: inline-block;....}......leaflet-popup-content-wrapper-left a {.....text-decoration: underline;.....color: #333;....}......leaflet-popup-content-wrapper-right {.....width: 50%;.....text-align: right;.....display: inline-block;.....vertical-align: top;....}......leaflet-popup-content-wrapper-right a {.....text-decoration: underline;.....color: #333;....}......leafl

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 32069
Category:	downloaded
Size (bytes):	7518
Entropy (8bit):	7.972755516890033
Encrypted:	false
SSDEEP:	192:2kB1PhDPjfsKLuF2/VS5jaW+dKyiBOA57rRNO1JoIkX0N:bPhvfs6h/ux+AyiAA57rDlS
MD5:	EF75D20B1FCC997B9524AFE78BF43180
SHA1:	864FD51EA9C676048F59F97AD60A199B72EFA562
SHA-256:	00373F2764AF460C2651B94F2D2BB74DBC477830CF6D32B421D0D88F68BDBC6D
SHA-512:	6048B859140597EE73F6491B00BFA1A8BB4B7D4E77E4B89F084A954313AA3DA049468D07DE1EFB158FF1B9305340E18BF1231698153051CF158650388E5D0B04
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/contact.html
Preview:	...........=iw.8.....?...S..A..q..;.r.cg....DB...dH.......$..g.=......P..Q.......?.N.,.[..>>.E..@a.2.....5.....b........y.....Q.&o..M..h`:69g...~E...Y@..9...@q.]....s...p2;.(.TH.....+J.......=.E..B.v\|..3...#.9...[.....W..M^..#o...... ..XlI~..4.v3.JsN.I.gA.v+......z)v.3/.Ee.ZP._.V.J..T.z.^=jV..:.u.....Ta..i..X..ZS.c..._...s.....B]HG.....f,^b...!.Y.X.I...%.`...g..Y0X......r=P.Lv.:^.(zm..l`0....(..6..Z%_...T.Zq.IsHY.0.a...L..1.@.#.4.>+...e.c.@....1...z%...+d..@.Tt...a..%"..@..~.ex{<^..qa...V.QoU..5...{..XFeBm}9v....L5..c.......u..P.BM.....2...B#.L..T._....8t.\.....~.{/..9+..QM..Z.L@V...q.....L=..i-.' .v..i.6..'(S./.v./.(..H.].% W.1/..E.yQw..%.3.AH...s....~Y4....".i;Ai.8...Z..8a1/.=$.y....S..0...g.2.......#....p'........&&.......QX....-.;n-..H..q.S...%.....LK.i.1.6D1..'l.4.......;7h.....N.H.\E".IQ...B..Ev...m.-....4......d-.M.....g.5...F`&.....Ag..@.Z.....{........A.6.. S.e...;..&..L.P.....B.2R..C....S.Q8..e..D$=.m.]....B;?

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x568, components 3
Category:	downloaded
Size (bytes):	35376
Entropy (8bit):	7.870533105814915
Encrypted:	false
SSDEEP:	768:nLMUbHPLd0gXXirSHE3FBpgsEbbsWALyqfGssHTXYrUgXRiO:nLMe3n01QTbkN0HTorUMRF
MD5:	5C05636635842EE4C0C164318094F5E7
SHA1:	8C8AD91BB26CDA0E270FC96747C7FA443379B7DE
SHA-256:	BD32F3CAB9704BF77F246FBC52AABE16FA2196089C00B6CCD2E3DAF923079B1E
SHA-512:	6BFDD995E574BCAA81A17C503FB415FEB3523F21A4FEA4CAA38F21977BFBC33F1DC341480E07F6E0EF9648BC2934E4987EFB5351252351C0DBC77203B31222BF
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-three-page-2.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......8...............6...................................................................S...........................................................9rlf.L;...~v4.l+AhE.....\|...8/.p.K!....bj..F5b.`=H......M;....`-.d3..E-.\|.0...u9.....$.N.mdrI..e,."........Z..!$.*....s9..pY..3.jrE/..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	299
Entropy (8bit):	6.924211392519131
Encrypted:	false
SSDEEP:	6:NXMfQEYEZHt7KfbfLVjeUdhfHyYEUhQAF6yRsak7m2kE:KiE5tmTjViOfHyYE4QEsakaS
MD5:	974A8EA2A8B86C3D99CFEF5DD1E28827
SHA1:	B6217466F6BB598B26B39B60F661D87AF7C6AE94
SHA-256:	7082D702280AEB204B77E214ABE9B35251155664449F8683C0290D9D71DCE05A
SHA-512:	E4D30EC915310ADDCC0F80B894110167A828F0163E653BD59FC6E5956337FE12672F9A40890D6FDCDB5FA6BB4514B3ED5F7764E544C4037EFBC882BC7631AC61
Malicious:	false
Reputation:	low
Preview:	GIF89a.............^...j)......0..}..J.$.w.......5..y..H............-....Y.....F....>.........!.......,........... ..Ec6V:.".\^%I...S7...d..ph.(<....P.I..2......4Yl$.."..R...S@x .+.C..&..U.y\#)vx.VW..W..]..)..e..e..........W.......:z......W..+......W....+.+...........t...."...."!.;

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 294, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	94896
Entropy (8bit):	7.9873169195609535
Encrypted:	false
SSDEEP:	1536:+NvwUSuyuP7sKhwZl7P1mq7nYG9KkDyxCvTNX6q+ojEf+op1bp1voayf6EGLlic:C9Suy87sl7P1N7nYjcyxCLNXrep1b3Q+
MD5:	9EB43E2A19C291E046AA6C594ECA67FC
SHA1:	647C018ED0BE49D935C758A2ECEB58F5CC7C08B3
SHA-256:	C4368445506602201B72D77E92FA91FC9CAB918898A5C8AF290D9726F687B10C
SHA-512:	9B7514EA109732756FBE1A0F3ABFD83B2FEEEB6A9F829D6A85493B3DA5FE8A713C2CB91E7E5B56EF7D6CB506A4553322779630C847B4AD3757D14F205F9FCA86
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/9341587.png
Preview:	.PNG........IHDR.......&......$/....IDATx..I.m[....f....n..{...........J...M..M......RHH..h.D/.@. .B.IF..fn...f...).....1.\k.......;w...^.(..?.P......t.....Z..R.......X2)$R.e.).H..d..09..dmIY..h...1..Z........(r.h.F...:.o.....C...d.d2.."&%T.D.I...!...../.@,.3..[.......J..\n..."....GB.(.Zi"..ZD.H.s.LF.P$B}..2:grVr.".r.2(.&..$..9..s.)..(.....M.$....2S..Hh... C$.UB....4.,....5..J..dB9Q9a.}.J.k.J...K).b..b....HY.S)2.......(..#WMN..E..V^.D")E....g.1...@....Y.s..r.)..kE.U..F...j....Q....8...S."..r.I}...%n5M.....uu............c.._..gwU}"NW...S.}....R.kU..O.Rm....<....g.....\.B.ONos..>.O>_...Vf6.6...Zo.@P....<.....E....g.~....mwus"..B..E)...P_=...Z]+.'7L..k.C..n\......S.... ....s..Y....X.3...t.dUl....:U....Z.2...cZ...\|E...Z.Fqr.'..K{..T&....Y..Tzs.?...Q.<.\|-.U...c.r.b..so./..zo4.[.gX..D%.k./..JID .K.2.WgR.n.j.%w@..<..{..w......rv....9g......R......).D.....R..,B.......}....T..r..jBQeD.S.HW.mJ....=.rc.\..Z....A^[M...\.DQ...l-^o..jP...r..

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	14060
Entropy (8bit):	7.934660494273198
Encrypted:	false
SSDEEP:	384:poLvKOStLynFTKicCOXVXRsGcPMBLTn81tKZlU:p6KXOTZcFXVX2GhnKMU
MD5:	927E3DA71595434CF3097022F8BB8C0F
SHA1:	35BDC870D581D9328CAD1B75E708E624C9134FAB
SHA-256:	83B55316A5058A7A0A5FDF638E3B0D733C87F98D38672E2F54FFBE6B88201CA2
SHA-512:	50BEC1A46711B22016270B0EAFC97C556C19134B1AFEC730D924C8F22D1BF9C916D1EB07497739AB38113EB35E448243F88CC5326389D32B6D6EF3917D73888D
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30308!3i18994!4i256!2m3!1e0!2sm!3i690435417!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=65878
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz..............y~.................................................Tnz......................i.......{.....t.._w........... !$j....o..x..8x.XYZ..=.......J....%...^.w..z...s..g...f=.Z[.f...5.IDATx....b.:.-.033SYY......3....V...)J...[.$...U.l[.......Jo.....u,.O..R>..........o.}.k...9w2.._..q....J.#..\|B.....50.".wkal.......r....._..t....\..8._.....%...!\|.Du...A..=.~n...'...>.%.....W...AlW.\|.}.".........a-....b...K.Z..0..!.a.<..........=L.B..J.".o...........mq.q...z...uA,.Q.......9...Z.A...%..X.yu..OkX.....l.5.[YP .~...P.V....,.s..... /l.F...+...0.......+.Q....G...%.`y.)..8...?...D.~.A.).z..1....~....qv.&....)..6..0.1,.z.......`X...t...V.......-.."...x./{R2)..S.:..K.{......-.....c-l..{...V.$.....kN... .....G..@R!...e....rC..'.t........}.R.a.."J..$<.X.'......4..O.H..)....B.....@Rq.u.a....G.&...p.....H7.y....n.*.%..w~..p@G...@...

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	downloaded
Size (bytes):	63468
Entropy (8bit):	7.949974955398468
Encrypted:	false
SSDEEP:	1536:hevMzawYR7v//zk3k0Bjr6POZ37rzyVdDGkBJ/9JC:k0zawY93WkQYOZ33GXDGkB59k
MD5:	68DC79A220F880EAB7576508E798FC57
SHA1:	23B02714F772D336746E6B8B76881A584FD71420
SHA-256:	A5D063C78600F8195499E6FC4DDFA07BAE4BCB7FC9CE8952744EE03B45E3FEF6
SHA-512:	76BEFAF252C81052592267ED37C78B9FF2CB223A81B5265702C113679A7C0BF46202F62E339AA0555A3DE734883F8A86D05C41AB148BC164D77D13D3D07C78F8
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............4.....................................................................................................................................................................3q.C...B.O.d.J!...M......................`.0.......2......N...%...%Ki.r.V..qu>^{9Od.`#.2.o>...}.:J*6.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 277, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	418549
Entropy (8bit):	7.9795855722462585
Encrypted:	false
SSDEEP:	12288:wun5mzGGvWP9vWZJmo9//RQDGlt6RVYQ3tm:Xn4HtxyyGRVYQ3tm
MD5:	64CCCE51A2CDFDF456B9E27FDEBE61A9
SHA1:	5A66A8FC5A9ECD6BF89F622ECA1ACBA09BC38370
SHA-256:	D0AC970277C573254A3D9E81E73E0C1385868BA193A29BCE56047CD737269E81
SHA-512:	D8AEBAB1AC66EC1451C0B6714DE7752ADD7A19BA756F2BCC85D82AEE1ED2E181FE8E6D4A26F3B696B90F5F1BAF50E95C7F561C65EAD5BD4B7777F3C77A6DC9A6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/1797786785.png
Preview:	.PNG........IHDR.............s0......sBIT....\|.d.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe Fireworks CS5.1..H.....tEXtCreation Time.11/29/11...w...IIDATx^....[z.={....w..[.y.e.X...+.......HQ.....). ......C.eLa.p(c..c.e..dYC..{.N..3...{...~....s[..L....w..].z..z.k.\.b..j..j..j..........=u..O../......Za.._{..n...^.A......I......M...._..^...i(j...7~.\|...?./...<k..R..Nw....o]...\.....^....<.K.Y./..M1^.gB...GI.86&E..%.a.].....:.?M.....O....IyYF.?/.Am......n..WW..g.Z{....2..i,.3.Z...Q.\|.agx..Y.m..].....C.~..k..V.W.-3...wI.......o.-.....X.Q..F.....a..'1..c...g.$..F..F+..:y.......(.s.Mb:o.d.....w...F}..n?..>~.Q...j9.>.7}...E......G.T.:q.......,.+.ge.'1...h:!...A..~.8&..q:.Gw.........V.....Nc...b....d...f>..CTV...(d.3h....r....Wb@^...'.}4.;.y.4..Y.......... .Z<......4a\.A-........n{...l~.......1].....y...v.A.O..../..J...?...W.O-..,...K.k<.g....]> .S..............a.h..7y.r5.+.&..../\|...[....f...6...E?..\|Fr.{....e.....j

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9924
Category:	downloaded
Size (bytes):	3889
Entropy (8bit):	7.9482584056737045
Encrypted:	false
SSDEEP:	96:N0EmaBIyVl/P5Z5+sk2MPYCVxqAsp2ZljEoxqgyB11MkJu:NMaBICRxZoszAqLp2lpxqvXu
MD5:	C837A388B8A10D82F2B913EAB8400B54
SHA1:	19886C9625EEF3B0DA43CA84016A3A132282B8BD
SHA-256:	59CD2AFE319D07B0F53349CA9C82C6E8186BAF1241EC13A2AB0AB0ABA888E3A4
SHA-512:	8493A47F98E66C8E85B8C72FC4C8D4C1733B454E7956C5BED9604C8E8D312A225603AD870C3CCD7C83585F458E9195EC684E83BE5B0E3960153B0AC16BCB2B35
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/images/ecom/weebly_by_square.svg
Preview:	..........eZ=......+.N..x.4.]:..d..G.\.2O$.hJ%Q.~..k...s.....F7......~.}z.....}\|......(O..^...._.Ons.F7~......O_~........_~.~.....\|...o......w.{..O?~...?.?..._..=.....'v...?.........?_.....S_.....[){..n.^..j.G.{km+{H...........e...<..s..=..y......3h.(..S.l..=........m...;.<.9H.w......b+.....]..[.{qN ..........D:.z.)iB.....L....~....X..6H.......Gk}Xg.S..]...x...n..rs[(;.z.?i.%nno.L@B.....#.^.[.]...w.P.PK:..%.\(.(.(^...t.....G.{v...9@...pR\|3t...s,....S..%..\#n.p....q.uf...g2C.A...\. +%.!Gj.......-a..a...$S...I2..R...d...8Y........<.}.yL. .}.z..[..CN..K.......H..jk0.....v..&.\|.sq..K..0.1R.X..Fy.%..c....7st2.(..,..zM....B.'...nSynO...TR...xT0u..U..c..Z.......`.pAd(.B.\:$..n.F.....gX...@%...M..>.U...%.0...T...'.....E..fo.w9.5..u.Xl.h..[.....y.P.........+qG....v2..p..n4.y.E<Cuk.&..\8...pl:..K...........;..&...l...X"..Wy.C..c;..=..+.........Yt...1..tl._OZ.v.xS...F...VX....)........j..p.'.c.....9..'....^1....b........F=..O...]...$K@

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1950x1059, components 3
Category:	downloaded
Size (bytes):	707081
Entropy (8bit):	7.988731028498549
Encrypted:	false
SSDEEP:	12288:Py9kukzOWLjNQuvKn3rKLLQyqviny8NGjkIjZKcgjZ29/YYa9q5W7z221PfY31ud:qgOWLYKLLQj8NAjIo9gscm21431L/ddE
MD5:	07877CBF8A6CB923581DFFE69A2B3F3C
SHA1:	202156FED44C4706ABB7E48AD9706C08BBDC4051
SHA-256:	D28D71608819A5D2B6A6FE1727E71115B4CE4413D3420ABDF49761D961EE3C14
SHA-512:	A15D06E0940EB558EF1315D68342EA2F31302834ADAD7CDD58B46FE14F2F8456DE71C2D7B7C00CB0588460FED093DBA12898B57D8B65A35FB7F1F7A6D59A4133
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/header.jpg?1644377169
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C84825E063411E5B948F896EB4B9473" xmpMM:DocumentID="xmp.did:4C84825F063411E5B948F896EB4B9473"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7F174B89063311E5B948F896EB4B9473" stRef:documentID="xmp.did:7F174B8A063311E5B948F896EB4B9473"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d................,..]....l..................................................................................................

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29608, version 1.0
Category:	downloaded
Size (bytes):	29608
Entropy (8bit):	7.991727160787561
Encrypted:	true
SSDEEP:	768:VN3z1ex3Pa/937Qlym9ssw8KnHcxYbis6chQ+0E0nmzwbv1fV:L1ex3ylrfmIznUYbUchyE0nmIZV
MD5:	46DADE4A0ED47B29DAE963A3A5B7CB66
SHA1:	3261819D3944B3355426CCC77BF01D69B91A9D1D
SHA-256:	984895040BBF61634F2EBC97C1C3F0E739786F7BC3B05E94D60D74A28B554C21
SHA-512:	7D8B9542B5958EE095ABD41407493F2B816E9766983A033E7811EB5B428E111D51F4C1C63706E9A6FC0FDB161E3564FB275BF7CB40FBFE6D6B1C9EEB2CC0B6E9
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/cabin/v27/u-4g0qWljRw-Pd815fNqc8T_wAFcX-c37OnuHXg.woff2
Preview:	wOF2......s........d..s6..........................}...x..H?HVAR.".`?STAT..'...$/D....P.... .0.V.6.$..<. ..j..J...5....v......G......)z.b..~..VO.h....g%.2.a.8....#3..LT..x_.L..>.Ht..#.}.R.QE#V.(d8I80hn~..Jwm.X.....U..5..]........#.4.......8.~..a....`g.X....S.C.A2..?.G......~s......;#$.v~...Qm.O.Rk...........}.o..\|...z..6h.v.).(e..n..-p.#..N.6....@................iH.Z...D.....qV.jL.k"T3...NEgLQTdF.....R..J)...F..3j..zs3......o??...... .R.MC4.0..SUW.QF.......s.{.....s......9...,.... .n]..b.E..8<.'..OU.}.......~4kBF BF.^.~...m%...H.!.._+q....O..~.pCZ.WB$$"....................Dd.dv....a..a8....I.........X .b..P""".J.q..?..c..!.n!....qC.3=a{...Wn.K....1`....m.f...N.......T..s:.R..}R.Ab......49*.....v..C.Y..M(.....S..>d..-]..#.hK...@..-....r3.y....u.HM...M&c.S,..r...!.G.....R...?..<.Z.H\-.8.DB.....?.?..L4x.... $2.I....'..........J.F1(.0~..?....(.F.....J.J.Q0.Q).{(.....f0.:........]........%rF.h....s..f...1.@`..........7;...j.g.K4)(.CH...M.\

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://q.quora.com/_/ad/afac78d381b547529232acd8e168a635/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1036 x 414, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31949
Entropy (8bit):	5.686373520422217
Encrypted:	false
SSDEEP:	384:m50wNt+5X8kpETEbamy1yCuF3h357QKMfjecerZmszmS:8rtM8kp4fMtPM+zmS
MD5:	E9221A340230248D714D7D6983E72CA1
SHA1:	A052DD3E500A102551B1F707D6AA39D4A3BD4BD8
SHA-256:	E11E7676CB4332944AE6C7A9ABD2B87D56721EBBF87227CC2DAC0A7C343B3A16
SHA-512:	E4F5A228F6A19F2E8CAACEDE3AAD48B314D70AE5915D87751BB77169B96DDB85A963A6807B440CC48880144DD65DA0112A073131D476E17B0F25FCC384772F1A
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/aa498dad-1691-4c3b-894a-906c990be323/eab8b6ff-57d6-438a-a7e5-c58dd370ce73/000d8b20-8c3d-4f4f-a0da-5b515f8f20d2/Square_combinationmark_black.png
Preview:	.PNG........IHDR..............u......pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5842), with no line terminators
Category:	downloaded
Size (bytes):	5842
Entropy (8bit):	5.523173921911366
Encrypted:	false
SSDEEP:	96:kjpsVjmT0jkXs2tw49Dss08F69RRE15zk2BTLTaUo8Bxo8P8fZPoP0R6OryWQ+:ap9c2r1dTaUo8Bxo8P8CP0UOOWx
MD5:	AB0CF4627C9BA9B9D6349135D4C790B2
SHA1:	CB6625239806EE39967BF5096B79C0B574EEBA1F
SHA-256:	4FC0CDE6D6A6EA927DB237555C820ADFCA92A6DFDBCF345333CFF92F1667C65A
SHA-512:	829C83AD76E9BF2FE5407ECCB67EF30BFC892C11311FB42EF67B4638ED71904C081C320CFDDA1EB064E8A4B972223E0431827E6B4A94FB01008E594C8F6D3D29
Malicious:	false
Reputation:	low
URL:	https://js.cnnx.link/roi/cnxtag-min.js?id=310748
Preview:	(function(){var d="cnx_roi",j="cnxclid",s="cnxv2",i="~",k=3,D="https://www.bizrate.com/roi/index.xpml",a=310748,A="1543392";function g(J,F,I,G){var H=new Date();H.setTime(H.getTime()+G2460601000);J.cookie=F+"="+I+";expires="+H.toUTCString()+";domain="+C(window.location.hostname)+";path=/;"+(window.location.protocol==="https:"?"SameSite=None;Secure":"")}function C(H){var G=H;var F=!!G.match(/(\.co\.uk\|\.co\.nz\|\.co\.it\|\.co\.at\|\.org\.uk)$/i);if(G.indexOf(".")!==-1){G=G.split(".");if(F){G=G[G.length-3]+"."+G[G.length-2]+"."+G[G.length-1]}else{G=G[G.length-2]+"."+G[G.length-1]}}return G}function l(G,F){g(G,d,F,30)}function y(G){var F=G.cookie.match("(^\|;) ?"+d+"=([^;]*)(;\|$)");return F?F[2]:null}function o(H){var G=H.reduce(function(K,J){if(J[0]==="config"){K[J[0]]=J[1]}if(J[0]==="event"){var I={};if(!K[J[0]]){I[J[1]]=J.length>2?J[2]:{};K[J[0]]=I}else{I=K[J[0]];I[J[1]]=J.length>2?J[2]:{};K[J[0]]=I}}return K},{});if(!G.event&&(!G.config\|\|!G.config.disableAutoTag)){var F={};F.pageview=

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8257)
Category:	downloaded
Size (bytes):	34040
Entropy (8bit):	5.287416778807363
Encrypted:	false
SSDEEP:	768:loNVXNaeaikNT+fhtgB/8jhVahd6imF6U5v/FLXisVLk3a+aw/T3THDizp5:ggd6FF6U5v/FjisNk3a+awDbDiz
MD5:	AF3F1B6DF4FF20BE5F87E844BF42373F
SHA1:	9EB38F4EA7E45046AF0EC92276005422C817315D
SHA-256:	CB1709768E721A29FCE1C49021B08F5643F826BFCC3716605E1DA007AFC9185B
SHA-512:	4E19DCD40661AFC800E8E4764D88073853A604880E401E59FECD05A9C88C1DB50EA802AAFF9354F91C9F5B03D30CC081AA0D3492EF9EBD7DFA35247CCCC74557
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3izEF4/yB/l/en_US/hVvQIzanlygfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometTextWithEntitiesRelay_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b={alias:null,args:null,concreteType:"WorkForeignEntityInfo",kind:"LinkedField",name:"work_foreign_entity_info",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"type",storageKey:null}],storageKey:null},c={kind:"Variable",name:"scale",variableName:"scale"},d={alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},e={alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},f={alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null},g={alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null};return{argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:{mask:!1},name:"CometTextWithEntitiesRelay_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null},{alias:null,a

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	dropped
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10325)
Category:	downloaded
Size (bytes):	36892
Entropy (8bit):	5.419591440002366
Encrypted:	false
SSDEEP:	384:qUrKxUkpQ8kvvbrLDsYpo36tlMNXvz/urYsdVonDJVr/misUoA:qpUkpsrLjpo36tlMxz/mYsdunjrN
MD5:	A6AE14E196EC1A9993AE3A8E6EF25A67
SHA1:	06A630979E06F531CB7D14F4F4CF8749063A9ED8
SHA-256:	179B7E13F2B3953319D8A468687C72D2D3B6CCB34A9790D39D6DDB95C853FB71
SHA-512:	7B2FD574A993F92BC05C20FF7398EFF1C112B4ADC679BB32AA021790E0BB68C6190D9735D59541E20B438F61E061274700519A8EDEA4439B17146F40EE62810D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y1/r/K4XTICDgjGx.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometSuspenseList.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.unstable_SuspenseList;g["default"]=b}),98);.__d("usePartialViewImpression",["useVisibilityObserver"],(function(a,b,c,d,e,f,g){"use strict";function a(a){var b=a.onImpressionEnd;a=a.onImpressionStart;return c("useVisibilityObserver")({onHidden:b,onVisible:a,options:{hiddenWhenCSSStyleHidden:!0,hiddenWhenZeroArea:!0}})}g["default"]=a}),98);.__d("useBaseCallout",["BaseContextualLayerAnchorRootContext","BaseScrollableAreaContext","LayoutAnimationBoundaryContext","react"],(function(a,b,c,d,e,f,g){"use strict";var h;b=h\|\|d("react");var i=b.useContext,j=b.useEffect,k=b.useId,l=b.useRef;function a(a,b,d,e){var f=i(c("BaseContextualLayerAnchorRootContext")),g=l(null),h=k(),m=i(c("BaseScrollableAreaContext")),n=i(c("LayoutAnimationBoundaryContext"));j(function(){if(d==null\|\|g.current==null)return;if(a!=null&&b===!0){d.addCallout({anchorRootRefContext:f,animationContext:n,cal

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1501
Entropy (8bit):	7.098269821866374
Encrypted:	false
SSDEEP:	24:x5i1he91Wwjx82lY2T3o5VE14VYJ4Vb2yJ3VI4Vh04V/GgMDS9XHKHFazxOPtqPs:MqQNn2q261BJ33r/OO9XmQtOPkGhRHHN
MD5:	C8C0701A09179919F6BC2F6EE5B74EF6
SHA1:	DA707055E7821C96961232E9B101CBB2F7F138DF
SHA-256:	97B2893EBBDC56C81A2A238B8EE439F478F4C220752F9AF48D751B86CEDB468B
SHA-512:	F45CE05E6C550A66C0DA5BFAF8FCCB197F76BE74FE58B33A12A7CB48FEA183F41CB20780FDE2A274D3829DAAE4267B23EEA61F28910B544EBBE2513AEAD9E516
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............@-.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE9FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBEAFBAE11E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6326BBE7FBAE11E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:6326BBE8FBAE11E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......OIDATx...k.A..wf7?0$.E.EP....9...lp..Q.x....U..(..[...\..^<x...<z.?`=.b ......MfKj..K.L2.......Q.._.v...)

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 33640
Category:	downloaded
Size (bytes):	8957
Entropy (8bit):	7.972304124612886
Encrypted:	false
SSDEEP:	96:u+cXydJuAAyk1g4HJDsJIwfsG/GbVZmn9DzSK3N4K0SdDMXz/CbgtDmLXERB8rx4:nrCASgJ2GGe9nJ0qgjqbgA/uD5
MD5:	B4040CD25A8E990D74B166E80B39663D
SHA1:	5F7EE10F2D2718592D0C407ABF117557EC38B9BF
SHA-256:	1B7C57353744D9EC25813A3A8BC7F987AE9D50F0E297716E505ADD6AF041D703
SHA-512:	9B497471A2768667BA98DBF5AFB681C2B7F19D0E830D012FEDAE3ABC3934AC7D9200A9957A8A43A2B3709BD07AEC9D3380AB5206C34159B20A71196DC4434BA6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/research.html
Preview:	...........}kw...g....h..H..e..~%.;.D7Jn.$....."....q.....b.....%[U._.e.q...9.D..B.^..@....go.mp.f..9.>./.pwzT.n.x{.p&...[...:.........i`.1w..p.eo..m..yh{.....6.a]5;...3?.\|.....7.K;.#..E.....7<m....@.>.(.+.t..%...>...?..?Y2.A.M.>....1.....v'^0W.....7C......d.M#xf..(`A...........Dx..r..h..=....9....a..`...8.!ve.).d@...q`....Q../@...n....g.;.C._......{..azs.G..w<n.z.....f...n.u.c?.5.z.'....(p..a.2....?.5....}}T:SHko.~vL......3g<."<..Im...ZwT.....a..m..#K....G.$n.6wj..8j......P..`!`.h...^1.....$......p.J.,gB@w!..4.,.Y &G.z..!,;./..r....C....8.....7w;..ns..R\|.....X..h.b.}....n.g"Gm.{f\....COf .[...$Le..&eb.D}..7".tp.^sw.........k.>.......4..7u..m..............w..j...o.m.6.zz&.1...V...i,.t,e5.r<...i..z..<..zR....\u.m(......?]/.M</.A..+.....$.;......<....$\.....dVd....W.O.?.wf.yJU.3Rmb...{,.?....B{.e.-..+%.0w.t.].@....Q@.&aJ..`E.s..r..H....o....Z..J.7s4.v.#.._.(..n...&.3..[....a...<...?..:<..?.....y..K.,.p.k..G........Z...<....z.\6.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.45059272536671
Encrypted:	false
SSDEEP:	24:hMiRO9oDcCsV2Yca9rWtWWS+Unx/C8G9Pi4MuaZDkrO6zLbcX8ruuPPUx:NOKDcaYc0Ck3/rG96QaZ76zLbcM6uA
MD5:	D441516C5B7F4E81D3C507EBFD4F891E
SHA1:	382F4B4473816032C3F23165BBC980F60CBA280F
SHA-256:	281BE2609799CE87F10CB0FB9C7113AEE24FFC6EFBEBF38C95A904C0A9A091A5
SHA-512:	70F8A795FC7D013D2761EB2BF23CFFCC9B602199C0878EAAAB46E10DA69099D24AACCE3851661BAEAC008AC8DE402928045C1094893716DAB82610918EFD1BE1
Malicious:	false
Reputation:	low
URL:	https://9628652.fls.doubleclick.net/activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	16222
Entropy (8bit):	7.964738353869957
Encrypted:	false
SSDEEP:	384:Ue+DlEforuY9hHoBaISQyxdqkOsZWN8iZJ8IhebHPxOqIdpk:Ueaprl9hHoydpE3MpOFfk
MD5:	1F2995002A6F55E72EAAEA37D30E9657
SHA1:	14D55405B6C5DD86A57FE48B7E8639F0110DCB53
SHA-256:	58BDB19F6AA3C33330F88F4EA13A698BFF29273DB3EA42B6E457A527A48D315C
SHA-512:	8F02F23DFD39BDFA4C7032370B2C0E061E513276380BC16BA2AEF134117EC7526B7AA8C5A6B8BDD24EA0CD57F8C67CBDA84DB0EE20D02E3C672D2DE463810DBA
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30308!3i18995!4i256!2m3!1e0!2sm!3i690435417!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=37235
Preview:	.PNG........IHDR.............k.XT....pHYs................#PLTE.......................................puz...................y~......................................................'.E......5.Q..n.........\|.......8Q.i..NRVC.]...................................J.....]...........o.....8.......Z]a.....f...ehl..A../..%8x....j..l.C4.S...=.Z..@ ..=.IDATx....z.L.6..Ef..l'v8.....<..........,93.[;u.L2.d.....f.M.$....%).....<.UE..E.ee^..m...u..D.`\|.n....W[[[..2/!.^o..y.5...__1.....k.x\...~z\Ig.r..0nY.8.).9.!V.}....vNS#.o.+.O..C.{..~..<}g^N/`.......C.p.Tg.+..ZA.)".]...5......,....".m&.<.v.o}........S........j}FF....,N......X.T&.r..Kw.[.}Sk....y9..'2....g).......l.--._.M.a.\.D6......=C.q"...v3.%TR.F......v......07...u.BT...B......Z,..sb.-.v..C....t.......??0..V...2.j...y.v:...I1.../jLQ...MN`.$...._....c.:......:w@"RQ-.:d.lvS.X)..YM.x9w......~...........M.z..0~..LH0...s)v....k'.F.d.v~.\|9.8..D5~.li.........6 ......tkk..$.sQ`T.....Y:.q..l.*.......,.f.t.l=.U..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5842)
Category:	downloaded
Size (bytes):	32773
Entropy (8bit):	5.429764441101349
Encrypted:	false
SSDEEP:	384:Y67RBUxxVqrPDwM1tcAF4Qkef/TJgOT5NPtxU3yqkJyJ/BgRanpVKyGdxRNElB1L:zBUxHoD1Bi/EJt5Y1BgRa8Wlsgv
MD5:	9F863E00DE6B57E3F6F310E985A1901C
SHA1:	19352AE4274BDF1893DDCA2F71F97259874F712E
SHA-256:	06472B1C877CFB5DC46456F14A8C1A3CAB17093AEB0A5B074FBE67F6016CEBAB
SHA-512:	2BD6B970B189D62255385E1766878B8ED5DABAD9263A3E455C9BE530E1557B5A1D8247440C1692948D6B3C8774CAF9731200250EFE5AD8AEDAB9B21D7979E83B
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ieKI4/yE/l/en_US/-bsZwTn4aTy.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFocusGroupFirstLetterNavigation",["isStringNullOrEmpty","react"],(function(a,b,c,d,e,f,g){"use strict";var h;b=h\|\|d("react");var i=b.useEffect,j=b.useState,k=function(a){return a.slice(0,1).toLowerCase()};function a(a){var b=j(void 0),d=b[0],e=b[1];i(function(){var b;b=a==null?void 0:(b=a.current)==null?void 0:b.innerText;c("isStringNullOrEmpty")(b)\|\|e(k(b))},[a]);return d}e=function(a){if(a.type==="PRINT_CHAR"){a.event.stopPropagation();var b=a.event.key.toLowerCase();b=a.getItemByTag(b);b!=null&&a.focusItem(b)}};g.getFirstLetterNavigationTag=k;g.useFirstLetterNavigationTag=a;g.handleFirstLetterNavigation=e}),98);.__d("CometMenuFocusGroup",["fbt","CometComponentWithKeyCommands.react","CometKeys","FocusGroup.react","focusScopeQueries","react"],(function(a,b,c,d,e,f,g,h){"use strict";var i,j=i\|\|d("react");b=d("FocusGroup.react").createFocusGroup(d("focusScopeQueries").tabbableScopeQuery);var k=b[0];e=b[1];function a(a){var b=[{command:{key:c("CometKeys").UP}

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17111
Entropy (8bit):	7.971917216750678
Encrypted:	false
SSDEEP:	384:0ntBr59tA4CtCJDyhXbT3bCEYNKoB+5d1UmLt4kNHS+rRJatXNOJ:0rDtAJCJDuXbTLCEXoMT1UcnXR+sJ
MD5:	6306D0F612F8FE43789569053FA5822F
SHA1:	4F9F0D91B10E63B605C80E9E024E87357163FF04
SHA-256:	9E50C3A0412895272220F33805951A27010CB4EC5DAB83709E4FFE9450CE179A
SHA-512:	CE4AD32CA8551E9415FC94A45351A8107689B6161E6F1503DB132CB33089A94A77EE386C5F5AC2F63023B0DEA5394291F7A912C3BFC173253AFE2B2D173B67A1
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30306!3i18995!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=20260
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..............................{~....puz...................................................NRV...............Z]a........ehl.................j........v........ !$.g..s.=.ZR.....A.IDATx....v..-.0333(+Kr.;.}....D..H1..o..W.-Y&P...\...S%.U..<}{.....x^?..N....U.?>H.hK...`..v....+Oo]..Q.(.,I..I...a-.VF.I.....z..'....].?.^....gW.V..`%..$..\|.b.....\E.)l}....6.lcXV (-oXK&..;..._Mxo...1_z.....{Y.9\..:..f.R..="...~.Q^..\|9Z...O\.hB6.%...78......r.D2OO'...+..-..o.....0.UQ..4\|..c.Z.@>..U.... .f&.<F'..V..........B..G...x..{.O.....\|>.yzQD[.....>.z0..'.+........1.mB~..n%.....qc.....A..LQF..p........&..n.s..\|.<.:h....N...g.o/...o...iqy..h..N..x..0.o.g..h&/..M..%M."..$...O$)[...W..R.(...I.E.).d\...^.^:..!..(..........X.pJ:...7..e.e!..=H.._.@V_<.... :...I....]..*~.M.v....N..v.(....W..-....2....4=..aX..L...5.DG.......S...@v.w.0.J.].Da3...2o}....P.).\;<...B@.3V).....TK.$ys.J}GT4y.i7vI7r.....'..".=..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.85111868335301
Encrypted:	false
SSDEEP:	3:Hupn3inFMArPG34Ck8GbnTTVSk:HuJ3yFMimPk8Gbn5
MD5:	BB75FE87BE6928C78FF4ADBE4FE66E31
SHA1:	9B03181C0CA9EE921BAB23BB1CDC5568B931D3F5
SHA-256:	8D99D8655674D940494DDE7FAF1E3B71048E5873CFF8F7919B59AD91D933BF46
SHA-512:	A3455552F5758D912257926453897D61C3FC561F72FD2EE27FA5C070A7BA0E9780EFBAC9B937699314686CB3FB9540788C6A9550DDFBE1CE17D7E6B3EAA2D60D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwk0m2PBhcDmKxIFDVkMGggSBQ28ierQEgUNg6hbPRIFDc5BTHoSBQ3sFTocEgUNU1pHxQ==?alt=proto
Preview:	CjoKBw1ZDBoIGgAKBw28ierQGgAKCw2DqFs9GgQIZBgCCgcNzkFMehoACgcN7BU6HBoACgcNU1pHxRoA

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	dropped
Size (bytes):	63882
Entropy (8bit):	7.965923658280066
Encrypted:	false
SSDEEP:	1536:gTm6wvWCNrjxnAiwRyeLZRCaK57JHWt/smcTYaWG8k7bZ:gTQJVnleBZ857JHA/haIkHZ
MD5:	CD1007EA2A611E50F0B6BAB39B7D8B41
SHA1:	2173EDC3C23A40025D31CDF917BDAE9C4FEC2139
SHA-256:	B647ED1FFFEC93B834EF7AAC865AD15B3FADA635F58FEC743DAF6CBE0F95B776
SHA-512:	86CF0F973163F9CCB0AAEA287578F9AE0B26766C5648F1EDF1235677E2222BAA13B40C8519B23768017986447AD2780BE4371CC29DA2ACA1291366C1C899F6C8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............6...................................................................S.........................................................+d.....l...D.4..k...H.,..@.+.b`...5........1.'..b\.8/.T... %.W<..y..I...dX..X .I<..=$...1.`7.j&........L.n....W.I>J.xM..x..I..Z.....o,'....

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.122714743434665
Encrypted:	false
SSDEEP:	3:CUXPQE/xlIle:1QEn
MD5:	ACCBA0B69F352B4C9440F05891B015C5
SHA1:	9D01CC5DC8E042C0D4AD6CFB8B3AC38E84A5EF9F
SHA-256:	47043E4823A6C21A8881DE789B4185355330B5804629D23F6B43DD93F5265292
SHA-512:	D3C4A5427BF645CC226106B0E8C28A76B0B91F50FA6D77E962A3B59B85BE2A0CFDB94EC0F40742F10C18025573D8FBFADECDDF60F4652BAE671F6031C02A7CB5
Malicious:	false
Reputation:	low
URL:	https://tags.w55c.net/match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1
Preview:	GIF89a.............!.......,........@..D.;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 217x224, components 3
Category:	downloaded
Size (bytes):	6356
Entropy (8bit):	7.922155289361046
Encrypted:	false
SSDEEP:	96:2j/PvoQJ0UxA80P7H4OGq5EfT81uDBk0JFn/kcFd2F0s+InwQt5d6T:S7ij8UHAu2Tiu1k0JV/kcf2Fp+Ixd6T
MD5:	24AEBB4BA7B4C5DA41B007727013D4D9
SHA1:	2ABDA6F19C316261C32F5CC95C1C94C001AE192F
SHA-256:	93CEB9096C4F61B2A34018171D48229F18DD3231CA90C5324BD3E20CB36664CE
SHA-512:	1E605B3E440858529DE73FF5D1A47CB2BEB666352944C15C6C99BF1D09A1D5EF27D31BEF76FF324C584D36D1101B4ADF6B6DEE979FB1EFAC1C2117501269877C
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/ben-photo-2-orig.jpg?1613521616
Preview:	......JFIF.............C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................B.........................!1.AQa..".q...#2BR....3b..r..C.SUc....................................%......................!.1..A"2#Q3Ba............?...%.T{$...n.[.]R.....)r@.zY+.@.Q=. .)..4$7.KD.....@ tF..$.B.#m...r....%...].!m..]..J....H............V...YB.e...XZ.+QQ..../.Dh..I8.....$..D..l..)...k..B@tB,`....H..c-.VN@.#HMOM!..!m.......%a.8..m..Y.j...P...]+ .Sl..5..#...G....D.Dh..u@.....!@.!...[k$.6U.2..'.0....:.C..$.../y.@mq\F.2.J...C[...r..u$..R`s..]4b'..3.e=.7^N...O.......,.k<...h.mq...)..u.XSi.EN.p.k[.....FR.._v.;..O[.-......9.)s...F...k..s?.jx'..8......e4.sX.[r.....yx......\|.9j.+i...K"hpq,hv..I.e......1:..h).\.\|......~...9...%.'...)..#..R.._.....A..c.W<......h.B.4.2...{ZZ...;...%3.&....1.?.....&o6.N..i..........$...J.....;....R). l.i.V......I...J.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20303)
Category:	downloaded
Size (bytes):	277781
Entropy (8bit):	5.409003009835988
Encrypted:	false
SSDEEP:	1536:fPHaQFjcTxlJ/yfJkmH9OD47Yz64HEBuP2j5yeOuUCbPuy6ITe0xquHcyiTiDtKS:+sxanP2j5c/QoxeVGROh
MD5:	B91F8351C38EE2969F06604BC4426BDC
SHA1:	FF189EECCA3A7556872F7843FA02FAD0ECD43F6C
SHA-256:	835A6A9105580722168284E5D60F969A45E602176E5DA75EE187EE117E260D0C
SHA-512:	F00052ADDA22B5A21E6DF3C4C6C6652052D9975DD87B305F62BE5188D73981E7BEBC8344130246BCD482FC57E6CE6418498734472BBC48C52273FFB5FE418E55
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yz/r/vSgPJr1eTij.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2601), with no line terminators
Category:	downloaded
Size (bytes):	2603
Entropy (8bit):	5.200470968492225
Encrypted:	false
SSDEEP:	48:JvHc4P5G+5XCUkVMNH0GuiLJpuuZYGnTEit4W8Ib97GW/o:JvHnGbDVEH0GjLaGYdWbbBGWQ
MD5:	4E00E94D576B19E631D801DBF35E28B2
SHA1:	FADB6037E146FD2ECB2372C52B2ED3B7C8A731EC
SHA-256:	10169A6E17DB716E555CDD90562DE7A273D47E727E03CA6DC377F7414851DA00
SHA-512:	A304460DF76FED66756C072402960B615A4C8FB62A2D201712F820ED0479F41D6BD077BF7475E850AD5E7E526B5CCEA3A1B9434FAB43C44EE483EB0FBF54CEE0
Malicious:	false
Reputation:	low
URL:	https://cdn.bttrack.com/universal/44881
Preview:	(function(){"use strict";var n=window.document,u=function(){return Array.prototype.forEach?function(n,t){return n.forEach(t)}:function(n,t){for(var r=n.length,i=0;i<r;i+=1)t(n[i],i)}}(),e=function(n,t){var i=[];return u(n,function(n){i.push(t(n))}),i},o=function(n){return n.toLocaleLowerCase()},s=function(n){var t=n.indexOf("//");return t>=0?n.substring(t+2):n},h=function(n){return n.endsWith("/")},v=function(n){return window.decodeURIComponent(n.replace(/%(?![0-9a-f]{2})/gi,"%25"))},i=function(){var t=window.location.href;return n.currentScript&&n.currentScript.dataset.url&&(t=v(n.currentScript.dataset.url)),t=o(t),s(t)}(),r=function(){return i.includes("bt-debug")?function(n){window.console.log("Bidtellect Universal Pixel . "+n.toString())}:function(){}}(),y=function(n,t){n=s(o(n));switch(t){case 2:return i.startsWith(n);case 3:return i.includes(n);case 4:return new RegExp(n).test(i);default:return h(i)&&!h(n)&&(n+="/"),i===n}},f=function(t){return n.createElement(t)},t=function(n,

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	dropped
Size (bytes):	42042
Entropy (8bit):	7.907166066560644
Encrypted:	false
SSDEEP:	768:yC2IIKVOyVilrngJn0Xt/ID5ld4ChYCPBw92x3ppQua2A6gJsuh:y0VDVilng2t/87dACPW9apHa96gJz
MD5:	49D6A41F7314850266535C58724544CE
SHA1:	6E4D2C8857C5BDF86332BC07DB59F216C7D66EF3
SHA-256:	17DAF1EF3E01A69DCD30DA04ECEC05CE333940207026CE06C7C2E1EB6BC9FC4B
SHA-512:	DA6337C4026C17E4F3F67C3D4DE4201938F7B0D2F7E522001AD99D5AC1C42F673C2CE94C49BADE6BBA91164E5C00E6A9777AB2C232C586EA348FF8C57BDA6AAD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............7....................................................................S...............................................................................................<.:...x......n.......................x.WN......#K...............!..i.L..F..S...u989#..1...fC..%...f82.

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1475)
Category:	downloaded
Size (bytes):	72212
Entropy (8bit):	5.539304588499332
Encrypted:	false
SSDEEP:	1536:OW1PtHrz4ya8UCzvhH8ntOKSsm8gIB+1gW0Lf3K57/Rr9wt599aA4TapDA:OwtLz4P8UCDd8ntOWTgo+OWufa57/RrV
MD5:	A2E1B76B83D7BE9C1DB112A0E3C5C5B3
SHA1:	CBBB6B6527C4AE8823E1A68C4CA1EC421F14C19F
SHA-256:	E60AD228B47001B5C6BEB2FAEADDB3C5E523B8FD488DD2FE4A5D994632990024
SHA-512:	F30A754EC5CE6FEE1315B50471769AC0A55070F70FAA82520DD12C8AA601B4AF0FF3F55BD2650A0A686637BF59C283D7B5706DAB960490AAEF4966AC644A58EB
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/marker.js
Preview:	google.maps.__gjsload__('marker', function(_){var hJa=function(a,b){const c=_.xa(b);a.Fg.set(c,b);_.Xm(a.Gg)},iJa=function(a,b){if(a.Gg.has(b)){_.uk(b,"UPDATE_BASEMAP_COLLISION");_.uk(b,"UPDATE_MARKER_COLLISION");_.uk(b,"REMOVE_COLLISION");a.Gg.delete(b);var c=a.Hg;const d=_.xa(b);c.Fg.has(d)&&(c.Fg.delete(d),b.an=!1,_.Xm(c.Gg));_.Zm(a.Fg,b)}},jJa=function(a,b){a.Gg.has(b)\|\|(a.Gg.add(b),_.qk(b,"UPDATE_BASEMAP_COLLISION",()=>{a.Jg.add(b);a.Kg.Gj()}),_.qk(b,"UPDATE_MARKER_COLLISION",()=>{a.Kg.Gj()}),_.qk(b,"REMOVE_COLLISION",()=>{iJa(a,b)}),hJa(a.Hg,.b),_.Ym(a.Fg,b))},kJa=function(a,b){b=(a=a.__e3_)&&a[b];return!!b&&Object.values(b).some(c=>c.My)},lJa=function(a,b,c){return new _.pk(a,`${b}${"_removed"}`,c,0,!1)},mJa=function(a,b,c){return new _.pk(a,`${b}${"_added"}`,c,0,!1)},nJa=function(a,b){a=new _.Kq(a,!0);b=new _.Kq(b,!0);return a.equals(b)},oJa=function(a){var b=1;return()=>{--b\|\|a()}},pJa=function(a,b){_.xG().lu.load(new _.AL(a),c=>{b(c&&c.size)})},qJa=function(a,b){a=a.getBoundi

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17687)
Category:	downloaded
Size (bytes):	18282
Entropy (8bit):	5.660943999253795
Encrypted:	false
SSDEEP:	384:eHqJezwxxSRS6Rua4aO8OiGa8VNUSfEeaeHOJZZ1NBjSTkQ:mirS1QavO8fGa8VF1aeHOd7xakQ
MD5:	133138DC8ED76A5E7F52FD72AEB36003
SHA1:	10C34D56309EF22C2BF88339D926EFA45F86C579
SHA-256:	177B76ACDCFB6E097A1C110E91BA676B60284B881D963CF56DC00E358957AE71
SHA-512:	06B3121679A88200E2AE49B47610DC28E60852911EF4313E1C96C09CE080654914C615A739234F952198F459C4FC7B50A2DDA3A88DE46D610DAD6225B2B86DE9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(R){D.console&&D.console.error(R.message)}return a},P=function(a){return a},D=this\|\|self;(0,eval)(function(a,y){return(y=b())&&1===a.eval(y.createScript("1"))?function(R){return y.createScript(R)}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,floor:a,stack:a,replace:a,document:a,propertyIsEnumerable:a,pop:a})},Br=function(y,a,D,P,B){if((D=a[0],D)==e)y.W=true,y.ls=25,y.P(a);else if(D==v){y.U=(P=a[1],true);try{B=y.R\|\|y.P(a)}catch(p){x(y,p),B=y.R}P(B)}else if(D==yB)a[3]&&(y.T=true),a[4]&&(y.W=true),a[5]&&(y.g=true),a[6]&&(y.U=true),y.P(a);els

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x568, components 3
Category:	dropped
Size (bytes):	35376
Entropy (8bit):	7.870533105814915
Encrypted:	false
SSDEEP:	768:nLMUbHPLd0gXXirSHE3FBpgsEbbsWALyqfGssHTXYrUgXRiO:nLMe3n01QTbkN0HTorUMRF
MD5:	5C05636635842EE4C0C164318094F5E7
SHA1:	8C8AD91BB26CDA0E270FC96747C7FA443379B7DE
SHA-256:	BD32F3CAB9704BF77F246FBC52AABE16FA2196089C00B6CCD2E3DAF923079B1E
SHA-512:	6BFDD995E574BCAA81A17C503FB415FEB3523F21A4FEA4CAA38F21977BFBC33F1DC341480E07F6E0EF9648BC2934E4987EFB5351252351C0DBC77203B31222BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......8...............6...................................................................S...........................................................9rlf.L;...~v4.l+AhE.....\|...8/.p.K!....bj..F5b.`=H......M;....`-.d3..E-.\|.0...u9.....$.N.mdrI..e,."........Z..!$.*....s9..pY..3.jrE/..

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2792), with no line terminators
Category:	downloaded
Size (bytes):	2792
Entropy (8bit):	5.856496713734989
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08Yy/qHSFYc0Ck3R/7eG9nK/:wsbSUtJfxrqLWWWdV6j1cyCHuQRon
MD5:	2B76CDB1274DFA6AF02700291EA9470C
SHA1:	12676AFE0AFAFAB43958AA4573285085B531F362
SHA-256:	0BB1E55C3DA90DCCB8451F6F0F3CDAA8EA3AD17FD4FB9078F7F3F6FF09DE9B93
SHA-512:	D3242010905894511A151CF2CFEF364D55F5B3A618127DF8A5773EC4E305260C9C8EF67BE0943687E744B0D64F654CB59FC8D67472E07600F3598ED53CB09F70
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984344943/?random=1714104722664&cv=11&fst=1714104722664&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	185127
Entropy (8bit):	5.61072303330007
Encrypted:	false
SSDEEP:	3072:1Iny3nX1cLef4JhyPZOhQwdT5amyvWJEA2yCbaK0cajPuTR+AS0aaQZa7eDakooY:1qy3nX1cLef4JwPgQwdTryvWJEAZaajM
MD5:	782F7162CF27C5599269436CFCA43E18
SHA1:	4838BDB9CD5A35D82712AA1C5F183068C04F34FE
SHA-256:	9D9D8028F36453616E3EF0FF9190B678B8BC5DFB2B5DA1156B415CB013C1C3D8
SHA-512:	25F5DF1C387ED52F82430AAB1589ABC8CBBE23CC09A40BB4F075A5FF05BD29376B0690275849858EFCCEE870363BB4DA2768AF203F9B57541839750CB2B0E201
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var Oma,Qma,Sma,Uma,Vma,SD,UD,VD,Xma,cE,dE,hE,Yma,jE,Zma,mE,oE,pE,qE,wE,xE,yE,bna,cna,dna,fna,gna,ena,GE,DE,hna,KE,ina,jna,JE,kna,OE,mna,PE,ona,QE,qna,pna,rna,sna,tna,una,vna,wna,xna,yna,zna,Ana,Bna,Cna,Dna,Ena,Fna,Gna,Hna,Ina,UE,Lna,WE,Nna,Ona,Pna,Qna,Rna,Sna,Tna,Una,Vna,Wna,Yna,$na,boa,doa,foa,hoa,joa,loa,noa,ooa,poa,qoa,roa,soa,toa,uoa,XE,voa,woa,xoa,yoa,zoa,Aoa,Coa,ZE,$E,Doa,Eoa,Foa,Goa,Hoa,Ioa,Joa,Koa,Loa,aF,Moa,bF,Noa,Ooa,Poa,Qoa,Roa,Soa,Toa,cF,Uoa,dF,Voa,Woa,Xoa,Yoa,Zoa,$oa,apa,bpa,cpa,dpa,.epa,fpa,gpa,hpa,ipa,jpa,kpa,lpa,npa,opa,ppa,rpa,spa,tpa,upa,vpa,wpa,xpa,jF,zpa,Apa,Epa,Fpa,Hpa,rF,sF,Kpa,Lpa,Mpa,vF,wF,xF,yF,zF,Rpa,DF,FF,GF,MF,Upa,Vpa,NF,OF,aqa,fG,eqa,iqa,jG,kG,lqa,mqa,nqa,oqa,qqa,rqa,sqa,tqa,oG,vqa,Bqa,uG,Eqa,Dqa,vG,Fqa,BG,GG,Iqa,Jqa,Kqa,Mqa,Nqa,XG,Pqa,YG,Qqa,Rqa,Sqa,Zqa,ZG,Uqa,$qa,bra,dra,hra,fra,ira,gra,$G,aH,lra,mra,bH,cH,nra,pra,eH,fH,ora,rra,hH,iH,sra,jH

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%23%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1263%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047153713
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	dropped
Size (bytes):	47105
Entropy (8bit):	7.927556455689492
Encrypted:	false
SSDEEP:	768:fjSlhPNf7jesBSqXuZFocIj2vw2Rl9QcXcHJ/Fqu9GQkc23itRt6dPX2/E3+Ko:fjghPVO/yLj2oFcXcp/FqSFf2ymQEq
MD5:	52CE31BB4E1610BD5352D781D979FC9F
SHA1:	D662727A320BF10E16A9BEE10D4CEC9729FF42B6
SHA-256:	4FBEDC936F8EED9350BC7EA19AEBC3EA8661601A2DED15990A410F6E8DED028C
SHA-512:	F99C0C1CE23EC0A5FCE0B7728205B9D2D32E0D56407E824B6E36B310F8BE0D7CAA1DEE2BE7B9C14D1950F3B3FEF888EB7A0CA9AE878D85B877A230947DAE8AD9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............7....................................................................S...........................................................),C.3.........p...h..e..;Mc..207...eD..,.p.<...&K.K=\|....s.."..ST.:..x.134......1+...4......+..B...r`W..`.9..p\|.J...y..t..W...+G...M...XM

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	dropped
Size (bytes):	42893
Entropy (8bit):	7.914198451014249
Encrypted:	false
SSDEEP:	768:PagPE/dWyy1G21A5tz5w2GBNlaE7LzWM8IBpWHrhrxSvyJIxUS5VVFwIpF4:ibIyyR1A57srzWM88I9rovWcJV3pF4
MD5:	AB453727E730989896E3CC0A7614891C
SHA1:	28F32FEC2B12B3FFE50ED79F44D6E7E2CE0FFE31
SHA-256:	A844310F8B4FCFD980A79A4477F93D6A1B0312041952749888412410442D6F41
SHA-512:	46BB04996817E75C94263A0F251FA16B0580EF7742676178F03DE2F4C153C39A7D2C138380296B13EBA5BB8C3866B96D710D070A002D2F620CBA6B05DB16DEEE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............7....................................................................S...........................................(T..............C.B\.6..2s.{ ..........,.5..............(....J.(......P.....@..*P....>>&..i....q.e.. hf.a.d..[..o.q.L.....".>@...F.....>7.V>.'........(

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15697
Entropy (8bit):	7.97219899580382
Encrypted:	false
SSDEEP:	384:T7Q18/1nOF5P82ukPTGGZJexIqppXmsJMv8+qIayCtPB5fc:fQ189+P82ukaGZJexJpRmsJMv6ltPB50
MD5:	35C6B711316A2C02D926909852F6494A
SHA1:	1A3B789544780CBC61613EC2CB872A633D280D21
SHA-256:	34A006DC42B7816A7819C0F56DF18AEEE8869019B4550D4449E0DDBDB0595E33
SHA-512:	284483BFA04D8A48DD45FEC5A2A7BF709FC7D5BBB86A021F5FC0177A1861D8E43BEA95BFA6B9224D745B674E3F0B8DE08D5E30C6037E3394687A42F6FB56D405
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE.......................................y~....puz.....................................................................n..Q.iv.....'.E.....8..J......].....5.Q..8..WXZ..{..%... !$.............o.......C.]......../2...<=?......4.S=.Z.....<.IDATx......J.6...Gq...[__?..._.^...0..\|..}....!}uwyU7.I..1W.>......)..j{....7o,C^&..j.=...z.~.f..B.;1..1....S2W........d....5oN._9.E-.......F..j.H.....aj.,.........d"^5..z.;M.10_......l.u.u.._'Ew12W....5.?.'O?..V....Dl......".^....Q.T.........v.L..!....Z...9..d...q..z..a....f....N.!^.WM.y./..a..yf..v..k......4...aVy^.x..._U...&V....A..S...n>..7.HC,..}../..f.....<.._..V..(..0u-V.j6^....&B..c.HZ.7H....G...w.5iB.y..dY...^...0...z0.;.~8.....+........B.......ok...bdd...E.8c... ....6.Y.@.}K3..d .:..^]....;......\|.R.x..q{w..../..0./.^..;......'.....m2R3.$..L\|L...r.vy&7L..2.w+..F.........oU.W.5..b.d.%r..U.@h....t}.....G....Jr....YVo...7.\A..;..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/746791505?random=1714104722850&cv=11&fst=1714104722850&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html></html>

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4102), with no line terminators
Category:	downloaded
Size (bytes):	4102
Entropy (8bit):	5.5604920418730135
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALw97a:eMilPFfmo4+7Cpi49m
MD5:	1CA8EACC4DE983D84E1DDD81FA5B6635
SHA1:	CA019D963FEC121CAA4A94EB4B0457CBEB9FC706
SHA-256:	A1BAAC59DB8ACF46CA6D1A03B4C4B71917D3901363FFFEF4DC4F1675780E607E
SHA-512:	914C974D7DB0E8C2EA70E60922C8D06C830FFDD5653BC8D851BF8487DB8BB3F3B340AA6F1034152B5D0C4FD44479654FED5943F707CF84803B70F929A441F39E
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3
Category:	downloaded
Size (bytes):	10187
Entropy (8bit):	7.9178709594981544
Encrypted:	false
SSDEEP:	192:HdUfZK6ruWFqBt5T0IeZdW1oMC5njiJ0kxdsMz3yXF+:HmZK5KqBb1K41W5jiJ0Osc8U
MD5:	135E61A61184CB0CECA5447677B64D5A
SHA1:	7BFCA7AB14C7BE8688729FE5C76D01C15DCCC0FC
SHA-256:	86CC78E492048DABF9309AF79C2504CA65DC7DD5D071259060517AE4BD494DE8
SHA-512:	7E9111002C5D2FD366761BA7DC229A596D8C45954B1E0CB07A55999E737B20B84903A47FFF7221572576DE55766C47EDFFBF77BFEBC1F3FBF43FCFA3E57F870E
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/5939774.jpg?250
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................A............................!.1."AQ.aq..2...#...$BCRb...4.D.....................................3.......................!1AQ.aq......."2...R#..B..............?...@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(...N......P..@(......P..@(......P..@(........Z.\.Oo.yj...h.........H.%(.q.y:....i...>(.M..E..d......[.2.uA'.R...()E+V.?_..Q.........<....z_..-bQx.......g.[....d./._.XKNB.Oj.....`n.)MZm.Wn.....~......9.6._N..?:....7.Z.6...cW.]..T..1...N.'..$v.....V.m....t..I{....x...6.vMf..X..7v..e...R...Lf.o.XJ....n...Q..i.[^/p...K...u ....P..@(.....C.@(......P..@(.J..;.:.9....-.M...)R.....t$l......t+...KN.....a..)....!..,.~.."..d.V.w...Xil...!K..}T..+.ms.^#-:m_i.......K.....3.7...Q.6......Q......{...JN.}.\.*...%.5.I..:...m./'.s2.h..L

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1950x1059, components 3
Category:	dropped
Size (bytes):	707081
Entropy (8bit):	7.988731028498549
Encrypted:	false
SSDEEP:	12288:Py9kukzOWLjNQuvKn3rKLLQyqviny8NGjkIjZKcgjZ29/YYa9q5W7z221PfY31ud:qgOWLYKLLQj8NAjIo9gscm21431L/ddE
MD5:	07877CBF8A6CB923581DFFE69A2B3F3C
SHA1:	202156FED44C4706ABB7E48AD9706C08BBDC4051
SHA-256:	D28D71608819A5D2B6A6FE1727E71115B4CE4413D3420ABDF49761D961EE3C14
SHA-512:	A15D06E0940EB558EF1315D68342EA2F31302834ADAD7CDD58B46FE14F2F8456DE71C2D7B7C00CB0588460FED093DBA12898B57D8B65A35FB7F1F7A6D59A4133
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C84825E063411E5B948F896EB4B9473" xmpMM:DocumentID="xmp.did:4C84825F063411E5B948F896EB4B9473"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7F174B89063311E5B948F896EB4B9473" stRef:documentID="xmp.did:7F174B8A063311E5B948F896EB4B9473"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d................,..]....l..................................................................................................

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 277, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	418549
Entropy (8bit):	7.9795855722462585
Encrypted:	false
SSDEEP:	12288:wun5mzGGvWP9vWZJmo9//RQDGlt6RVYQ3tm:Xn4HtxyyGRVYQ3tm
MD5:	64CCCE51A2CDFDF456B9E27FDEBE61A9
SHA1:	5A66A8FC5A9ECD6BF89F622ECA1ACBA09BC38370
SHA-256:	D0AC970277C573254A3D9E81E73E0C1385868BA193A29BCE56047CD737269E81
SHA-512:	D8AEBAB1AC66EC1451C0B6714DE7752ADD7A19BA756F2BCC85D82AEE1ED2E181FE8E6D4A26F3B696B90F5F1BAF50E95C7F561C65EAD5BD4B7777F3C77A6DC9A6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/869984522.png
Preview:	.PNG........IHDR.............s0......sBIT....\|.d.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe Fireworks CS5.1..H.....tEXtCreation Time.11/29/11...w...IIDATx^....[z.={....w..[.y.e.X...+.......HQ.....). ......C.eLa.p(c..c.e..dYC..{.N..3...{...~....s[..L....w..].z..z.k.\.b..j..j..j..........=u..O../......Za.._{..n...^.A......I......M...._..^...i(j...7~.\|...?./...<k..R..Nw....o]...\.....^....<.K.Y./..M1^.gB...GI.86&E..%.a.].....:.?M.....O....IyYF.?/.Am......n..WW..g.Z{....2..i,.3.Z...Q.\|.agx..Y.m..].....C.~..k..V.W.-3...wI.......o.-.....X.Q..F.....a..'1..c...g.$..F..F+..:y.......(.s.Mb:o.d.....w...F}..n?..>~.Q...j9.>.7}...E......G.T.:q.......,.+.ge.'1...h:!...A..~.8&..q:.Gw.........V.....Nc...b....d...f>..CTV...(d.3h....r....Wb@^...'.}4.;.y.4..Y.......... .Z<......4a\.A-........n{...l~.......1].....y...v.A.O..../..J...?...W.O-..,...K.k<.g....]> .S..............a.h..7y.r5.+.&..../\|...[....f...6...E?..\|Fr.{....e.....j

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 16132
Category:	downloaded
Size (bytes):	4703
Entropy (8bit):	7.960774890775469
Encrypted:	false
SSDEEP:	96:NUl5XgbFPIAJnQiJMXmE7AjNdMH8OLuH8A+pdbsD6tNDU:NxyApQiJ6kJdA8OLucA+XAGthU
MD5:	D9B903E9BE61E2E18511BEC0A1EE0090
SHA1:	ECACF6BE8DD2D0D4056A9B9E63414616947A3F8C
SHA-256:	E964C02B1C22D8E3F3C458AFEA638D80EA9AFE436B0DCDAF22BD710A28C1B16B
SHA-512:	17C2AD1C9018A1C7AB17D9EC6AF78EF58FBC822E7E9A304CD76C36082AF275DF6F45D0A3ADB7BDD976041A531ADEAE410C1A9890E277DE8ACCFF59AB8DB5A1A7
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/mobile.js?1530561231
Preview:	............ks...3.+.S..IQ.4.m...4..k......"l....h5...>...4.N..%...n.....R.;.T..?>}...?...q.R....6.I.\.../6e....G...pp.T.....g..<..O..r.=.....?_.z.W7.O........7..........7....p...O..:........Z...IQK.../.m^.....z....V.t.....`..:...L....MQ0.....-4.T5..:..e3]%M.....u.}._/U)..F..H\|/.j#.)/$F...]"...%o...^&M...D^.m^fj+~.;..NN.U).....F{iZ.r.j..e.Ox=.W@.UsWHx...C...m.....z.a.4....k....p............F.g.HDZ.@wR.9J..i.?..Y......N<TB......I../e.X..p..J......d...pj.Y.e%..h.R.j...z1.;3.H.H."M.b.....d..B;U.j..d#k......."/e....B.d..:..U$5.T.y.c......B....?......3....~.......r.!o.J...7\|...-.U...`_.N.....].+8...kNET..I..F..D1.......O......b.G.%.<.w00..}.GL.>:w.tID.:.....x.'.T._@.....Ug....&/r.oV.'s.U.D...4..e....R+..7..7..{f...9..g..w..]...:7 .#u..k)..8.M..Ec.g...9i..$q.:'......-.`.A..4..m...A4D...'....xH5...8.C....._.(..In.t...V),....RU6y....x.?......X.Q.a.TSL....c1c....#.t\|..<5...e...>.#h.....X.J.E......Rm.....<.7.x..@Olx...(.L`f..~..d.`........._..*U.,..3.\,P

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	142031
Entropy (8bit):	5.322595697541325
Encrypted:	false
SSDEEP:	1536:AZMKnCMFCNJoAU0gs82klckukSk2kd9qIMEcj/FSlYR7tM0v7B:QMKnCqC1kukSkTTYRl7B
MD5:	854B0855658A1AC6D710C6F52793EFEE
SHA1:	7E4A8BA7351AF3CD9363C6F42685696C6B8F3F01
SHA-256:	C55CBFA5B4E66D02AB3DED93E609BB5E77218AD0841482CC3239371816338CF3
SHA-512:	FED09FEF0E04E375B6FF29F2320ADE053A95451BAB4AC9FC37BE96E1C6480F3863AC8495FBC6EED5AB15013BE62270311955774B9A549890ED94FB4ED468639B
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Cookie preferences","MainInfoText":"When you interact with our mobile applications or online services, we and third parties obtain certain information by using automated technologies, such as cookies, web beacons, and other technologies described in our Cookie Policy. This information might be about you, your preferences, or your device. You may opt out of certain categories of third party cookies, other than those that are strictly necessary to provide you with our Services. Expand the different categories for more information and to make your choices.\n<br><br>\nTo effectuate your right to opt-out of the sharing of your personal information for purposes of targeted advertising, please toggle off \"retargeting or advertising technology\" cookies below

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	downloaded
Size (bytes):	11201
Entropy (8bit):	5.073272298208804
Encrypted:	false
SSDEEP:	192:mJOeM7EzFF/sjm4GO5cHSk8UDmEQVyeBIhZguQEBknYb73QCgjINE:TeM7xmHtrQDbuQ3clgt
MD5:	B84AF32C3C94747EBB481D08A716CFF7
SHA1:	9C4D8CEBFD9E511AEE3B84632EE0C77B400A8337
SHA-256:	FFFC4A969ECE8D55971299A83E150B675F2BAB7C576D3CB2AF00AC32D80755A5
SHA-512:	0D9746C0DC952D6C375AE22CAE6F7F3E7732FE3FB19B6F629CC4CB8DBA5939BFB038EE21F0A1BE81F6E44D49BAADA10208F73EFE07A89AA4F8A932DEBDD3C609
Malicious:	false
Reputation:	low
URL:	https://rules.quantcount.com/rules-p-e9KDqb0WIZVj6.js
Preview:	/. Quantcast measurement tag. Copyright (c) 2008-2023, Quantcast Corp../.'use strict';(function(a,l,k){var m=function(e){var f=k.createElement("a");f.href=e;return f},n=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url>[^;\n])/,/^http[s]?:\/\/[^\/]tealium.\/.page_url=(?<url>[^&])/],p=function(){if(l.top!==l.self){try{for(var e=0;e<n.length;e++){var f=k.location.href.match(n[e]);if(f&&f.groups.url){var g=decodeURIComponent(f.groups.url);break}}}catch(h){}return g?m(g):m(k.referrer)}return k.location},q=function(e,f,g){return e?"nc"===.e?!f\|\|!g\|\|0>f.indexOf(g):"eq"===e?f===g:"sw"===e?0===f.indexOf(g):"ew"===e?(e=f.length-g.length,f=f.lastIndexOf(g,e),-1!==f&&f===e):"c"===e?0<=f.indexOf(g):!1:!1},c=function(e,f,g){var h=p().href;q(f,h,g)?e(h):e(!1)},d=function(e,f,g){var h=p().pathname;q(f,h,g)?e(h):e(!1)},b=function(e){return"array"==={}.toString.call(e).match(/\s([a-zA-Z]+)/)[1].toLowerCase()?{labels:e.join(",")}:{labels:""+e}};try{__qc("default

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11231)
Category:	dropped
Size (bytes):	21721
Entropy (8bit):	4.788111939848617
Encrypted:	false
SSDEEP:	384:+28C0pGoFvlC2MGAVsqlXaivSYBQY2YpuMc:UZN
MD5:	5DCC6595E01C3C63B69F991366B1C7D9
SHA1:	5CCDD7E36F0F99FDB215CA9FAE7EF1A41CED8A90
SHA-256:	930239150E702D9D4BF43C3881AA70F8AD5FD9068DCBECB7C8BCCA654784F7F1
SHA-512:	475850913930ADC9C8E9FE6BEC23609D7DDB11DEA4018FE6EFAC084F7B366D457705FAA4AFAA9B4CD1277128B411C35835C52A9E3EA7FA3D4793F4BEE79701B1
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-foo

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	938
Entropy (8bit):	5.468118875446559
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WUL8BMUNbpbzbvcV3sSZcfMpNrl/nzsSMLO:si2N1V4NxwZG1QBfVcV8AdD/QdAapY
MD5:	CE3FE24C73E9A53D0D712FD2D94D3BEF
SHA1:	6AA8D679946F6F8AF59C63D2FE5E804AB1137D38
SHA-256:	FC6D0F54AC72F7D0E46CE0CCC5562B76ECD11F26683A51CFC7A4C3F8DB2917BE
SHA-512:	CBCF34AA2FC216F8E9017949D69DA7F288D2C6935FF8A3D95AFAA6290D802FC789D862AAA30D33C60574F4415B3AC2202104A3459BB470CC99F27E48E9AB5E51
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=lb8beig&ref=https%3A%2F%2Fsquareup.com%2F&upid=wf1vc7l&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bdad84d7-0c54-4f11-9820-187176aaa48f&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUk4lmfpse:eBse
MD5:	377D257F2D2E294916143C069141C1C5
SHA1:	B7CAE69682CF31DD670B65088DB8395ACDA6ED3E
SHA-256:	AC8778041FDB7F2E08CEB574C9A766247EA26F1A7D90FA854C4EFCF4B361A957
SHA-512:	01211111688DC2007519FF56603FBE345D057337B911C829AAEE97B8D02E7D885E7A2C2D51730F54A04AEBC1821897C8041F15E216F1C973ED313087FA91A3FB
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690136%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 191x301, components 3
Category:	downloaded
Size (bytes):	14336
Entropy (8bit):	7.958034509800068
Encrypted:	false
SSDEEP:	384:9aSdNGuy5lmYZmqCwZwWeNkK75s0gvpZ5:9/GuyuYINkK7Op
MD5:	0FCC8232A0300117D3FE831FA3B0B0F6
SHA1:	CE725D8D59BA55AE481917CFD92C5893A752D5B5
SHA-256:	9BFB4E989156F2ECB90C7C37F3D21079397D29687E2D8BD79F2FE7CF92577849
SHA-512:	988DD5D497D20135BD282559CA67E89F151BE498186AAD3359EC6C50181CA90BBB042912A5EE1C985ABCBBC69547029093150D38F844591E3E0894C3E5A22E32
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/editor/website-photo-heidi-saunders_1.jpg?1491196700
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................-....".........................................B.........................!..1.."AQa2q...B...#.Rb.....3r.s....%4c...............................,.......................!.1A."2.Qaq#3B..$..............?..(9..;Uh.\.x...\....h5\..z...j..z...V.'j...V....VO.A5g...9.....V.w.V.c.O\|..Q..=qY...A.B...T+5.\O.R.^.C...z..W....P.k...j...Wf..p4D..U...\..W.........FI....m$......Qv........U...n[-1?..S.=.k...M."u.h...&.owd.z.Z.D................Mu..f....p....H..!?.......2....[.<..\.Z..eOZ....0?j..C..\|...y.[......H ....D`}.......+...juX..%J...Q..'.k.\.0.6.}..-.....S.7..1..5S..(_.Gi.......Nu %.R9.h..B...#..L:.. .m.........s.-)+O.2q..[{z.ZE.J.QU....!a_.:wY.....kK`...n}..M\|.......K..E...!JJ.......4..fR..+.....wv.7H.k$.....%.2\|...Q])......6HO>.....\|.P...i....\|....{....T&..{.Tv?....5iIvj.5L.9...>.Bj..j..k..T.j..j..

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	997
Entropy (8bit):	5.023080424153227
Encrypted:	false
SSDEEP:	24:t4141kGOn6iHcuP4cQukfQxFf6izHcXA4mhMADPfy/B+:CZn62Igf6yFpfy/B+
MD5:	7850D784C53CDA239A9BE34372B242E6
SHA1:	988F8FD493FA61F1402A0C7EBEEFF6A438569C80
SHA-256:	7A10379A971BA3EDD630D99A643395A32574B5BCAC84B260659D804A46AA74A2
SHA-512:	EFDF7EE90453BB74A34831B5ABF0E4F0A2CB71A8150BF56837E5D31ED0E998CD1AABAE91186B2A1067405A2D0E795C8BD8B2F768158190C1DFB59FCDEE30C3E0
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/images/comet/empty_states_icons/permissions/permissions_gray_wash.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112">. <defs>. <clipPath id="a">. <path fill="none" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/>. </clipPath>. </defs>. <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78 11.78v13.6h0-25.37 0v-13.6a11.78 11.78 0 0111.77-11.78z" stroke-miterlimit="10" stroke-width="9.48" stroke="#a4a7ab" fill="none"/>. <g clip-path="url(#a)">. <path fill="#90c3ff" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/>. <path d="M80.28 10.59h23.26v23.26H87.32a7 7 0 01-7-7V10.59h-.04z" fill="#1876f2"/>. <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78 11.78v13.6h0-25.37 0v-13.6a11.78 11.78 0 0111.77-11.78z" stroke="#fff" stroke-miterlimit="10" stroke-width="9.48" fill="none"/>. </g>. <rect x="10.54" y="58.29" width="57.83" height="42.76" rx="4.41" fill="#64676b"/>. <circle cx="39.45" cy="75.25" r="6.3"/>. <path d="M36.62 73.73h5.67v12.48a2.63 2.63 0 01-2.63 2.63h-.41a2.63 2.63 0 01-2.63-2.63V73.73z"/>.</svg>.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 3430
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	7.605661923480434
Encrypted:	false
SSDEEP:	12:XGRkzwAjvKJ1OdG/kA+ATNW9/HaELQJGpNiwpbPAc8QU7N6:XGRdAm+Q1Tg9/HaELKbw1o9Z6
MD5:	ECCD5DD78023A8EF3482B249248F22BB
SHA1:	1156B9F89791289E76A5C1E278980A15A02840B9
SHA-256:	3C61DE858EB61A3EB828B7AF8BD93D4172D20EDE4055AE2BC53562FC848A9FAA
SHA-512:	8A41B50F4A1A6DD980057547BD3706B09FBB3D491854039E8B17088105A472AC09518CF0ED8A8BA87CA5BE547E79A64747A48277C456F14AA091A83DA3F3D753
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Montserrat:400,700&subset=latin,latin-ext"
Preview:	............o.0....+r.6...%q>v!Ik...`B.B...$E......<.^.8 .1M.^..-.....9..mW.uU........"/J....5U....K...\...;{....j.].....Z.dly..[...u..'+)?.....e/sY..b.8...&wn.;/.\...\|..W\...g...Go_.._>T..z..SZ...'...j...W....u..<.6.(&.,...&T..zC.....F$..;...b.s..q>..9.e..(..(..d..$..HAdzR.....7Zn.R.yS....y....hS....#..i!.C..4p..@..%fX".R.h..s...W.g T.'p.5q`6...\D:s.........W...da"......R..,)B.IhO....p.f`F....A3fT%0.t...j@ ....o..n.....hW.\....v_g..).O3...q.....\PM...Q....i.:F..D. ..D_.`.=!...@Y........<Y.[...z4..'.a...O.7........Hp.f...

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUXPQE/xlHh/:1QE1/
MD5:	A5098C60B3B0C879A2C7AF6C68B7B53F
SHA1:	939F40BE7F1AAF623F62886DE4AABA3886DF9B65
SHA-256:	693D949D8C3FDC7FD4ACE7C340B5F177A9F0C5BE7BAFEE8BC93A7D88B7523D75
SHA-512:	8D1A90658546DBA33FE007A0F4F0FD706E94FEDDAB3D60C727FAACE9F8BCD1AC2BCBAF0CBB00501D7ABDB9DCB68E8E23F23CE5B59E2F3058A3A0237A30631A1E
Malicious:	false
Reputation:	low
URL:	https://arttrk.com/pixel/?ad_log=referer&action=lead&content_id=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&receipt_id=undefined&pixid=0ba6452e-34bf-4a66-9ed7-f0e47bc6efcf
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_d07onas7e_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45151)
Category:	downloaded
Size (bytes):	492868
Entropy (8bit):	5.575365801910698
Encrypted:	false
SSDEEP:	3072:OdxW2TY1+3a2WQaf5qZ3fPO+8ZcS8WG1LceF2/ea8LR9Wk9As6xOQPGA2STnXDLx:sRxa2WQXXN8lYLceF+t9TnXP9RIMtJ22
MD5:	A1A6E1F2214F111F1BC36846CCFBF736
SHA1:	5881DEF1D291F7EB7650CDE4F4FCBD04E2E32A55
SHA-256:	90F42ED83657D8925149F930CC0E3C3A63E897DA6ED8FEAE0ED40BAFD3353960
SHA-512:	CA0C7F3CC72EE6F0D0EAB7145487900F382F579E24928E40E6F3DD530F5FCA7D6AA38300ECCCE4CE0FB5532B4FE165A725B8D1872AE0913422A50FA2C1EDB6B8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P72T5M5
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"571",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"onboard_underwriting_complete"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"null","vtp_name":"country_code"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_url"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"env"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_url"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=",["escape",["macro",5],8,16],";return a.split(\"?\")[0]})();"]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"jp_manual_review"}

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11197
Entropy (8bit):	5.162990655585194
Encrypted:	false
SSDEEP:	96:lobrYqqOBrG6JWTJNOu1uXCLtn7zAtqsuZ8/yYvvN39L1dH59EJlXJTdJz+ePzPF:6BCiUiCBF8/nH1QTLb
MD5:	073C64EBC136324C5952D8F1E66B29B5
SHA1:	1EB80C533626492F77EBEAE4CD0462D24A73FA77
SHA-256:	822EC92A2E165AE52D8C05E6D430F24BB9FC925FF6B4FB33DD184BBDE710033B
SHA-512:	D1DF14533008763A9F1270269C4DE2198C67C778EC2C4721123D78476089A31AFA4E95BD6C15DB2F459975B4773D4B87036861216B0C021DB2EAA2719783A8B4
Malicious:	false
Reputation:	low
URL:	https://api.sprig.com/sdk/1/environments/mVfPI-96JuPi/config
Preview:	{"border":"#006AFF","pageUrlEvents":[{"id":1796782507,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/bars"},{"id":1796782506,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/fast-casual"},{"id":1796782505,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/full-service"},{"id":1796782504,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/quick-service"},{"id":1796782503,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants"},{"id":1796782502,"matchType":"exactly","pattern":"https://squareup.com/us/en/pricing"},{"id":1796782501,"matchType":"exactly","pattern":"https://squareup.com/us/en?v=restaurant"},{"id":1796782408,"matchType":"startsWith","pattern":"https://squareupstaging.com/us/en?v=restaurant"},{"id":1796777521,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/full-servi

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUXPQE/xlHh/:1QE1/
MD5:	A5098C60B3B0C879A2C7AF6C68B7B53F
SHA1:	939F40BE7F1AAF623F62886DE4AABA3886DF9B65
SHA-256:	693D949D8C3FDC7FD4ACE7C340B5F177A9F0C5BE7BAFEE8BC93A7D88B7523D75
SHA-512:	8D1A90658546DBA33FE007A0F4F0FD706E94FEDDAB3D60C727FAACE9F8BCD1AC2BCBAF0CBB00501D7ABDB9DCB68E8E23F23CE5B59E2F3058A3A0237A30631A1E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30768, version 1.393
Category:	downloaded
Size (bytes):	30768
Entropy (8bit):	7.992993408701693
Encrypted:	true
SSDEEP:	768:s3jezTHvXb8P4N9XR9HmNpctU+VXhjV575Z4Z:siHYP4jWNpcu+VXRVCZ
MD5:	2344124773C71BF4FA4AD407E7C3A467
SHA1:	3394A43AB1EFAB8A22A1F07222F7F02A9E12CBB8
SHA-256:	BD4D2E29F503390E4951AF9232FC43780B43D349647188D8F3F600835F16AFB7
SHA-512:	DE4B119B8262A67FFD420B1E8810A150038D8AFA68EF69127292C0A0043312B3B6EB578B738BE51FE2380E2E4C1A8DFD647B7D684CFF1AE206716312ED3EC0B6
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/fonts/SQ_Market/sqmarket-medium.woff2
Preview:	wOF2......x0......I...w.........................?FFTM..Z...L..J.`..6....s.....p..}.6.$..`..r.. ..B..u...?webf.[.)qEt.0T..m...x..G..c.....o,......5p...WG.g.....4.X....(._.Up.GH#2Q+U.>.D.Fl9.F.}F...N..-QaS......?.i..r.i....aN.iN$f;...@.J.t..".mdC.....\...E...Q....^......o...I."..)^I...b..\|.mr.........(...+....8.\|.#....6l/.7y....a...P....=.............,~.LnO..8z....O.y..^..\.&.r....?e.!<....t..$..$..<s2.)....P.;M...R:..(S....:..s.O....=N.Y..8z.lm...E..J...'6]3........\.t..5;...Y...........H).`..b......(&zK..]#.^...n....A...Y...+w.N.i.qkf9L.e...Le...b.T..\.C...........K.UI..>.<.6...%..2.3...A...c.I.S....3N.. K=.4.....t...k.....{.U.UX...C>.#fs.......4..1....z....x...y.h...z\|H.#...p.-.H.Y.p..P...._..F....1.....U..yQa.n.e.yX.....s^......_...s.#....x ...1.).0...S4.....G;W.Ae....{..6.A...Z5vW8....=.L.+D..Zy$d.=.. ,A. .o...,Upb...b..d.{..m..$~.".\|U...t.......5..3...i...#uO..e........."._.=.KMFDn....@.k.@i.......k7..}".5....ACy..P.J.@..9..wW...ny{....g$

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62323
Entropy (8bit):	5.411471471310117
Encrypted:	false
SSDEEP:	768:/i2Ve3JXEZSNGhsfQpWWzlc18sQJHoQqhF:gBU9Dzlc18sQ5SF
MD5:	41E74CBE9AEF15A5CE1A704D0D4BE82E
SHA1:	019EDB948B551FE3458BCE3C78D1BFDE388FF02D
SHA-256:	70FD7F6CED21739E10103744C72ACDFC8E8422502D74D4FAD2DDFAB3AED0BBC5
SHA-512:	0E609EEB7E7E5C6A17AD84322EEEE8632A76A6C1DA84141C6DCD2A5B4BB316D128ADDABD9EC727C33368E197D966480833365419FC6F1AB9B0D831E3EA48E374
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29689)
Category:	downloaded
Size (bytes):	33847
Entropy (8bit):	5.322382507770696
Encrypted:	false
SSDEEP:	768:bL+8xbGAX0IqkXyRMMNXCcP6PcOhJiBqJ4MBRFFc:u8xbB0Iql4cPkcOhu4Fc
MD5:	E29E65DB7BF0A096587728E1FAACFD9C
SHA1:	633E2049BBF1AED94736784E83106BB4CA366763
SHA-256:	320F88C7A9672864D92D9369CDE081BA7C6E9A27CD0592755B011BE432373882
SHA-512:	A281CA95E03CCD4730FE9053D348135C1F6C83A3F4A9E80C1D68A7274A10EEC5B19E34E20176F64243D80EC9F94A034C54AAE76DD8D7FC08A90714977E18C8BB
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html
Preview:	<!DOCTYPE html>.<html data-scribe="page:button">.<head>. <meta charset="utf-8">. <link rel="dns-prefetch" href="//twitter.com">. <title>Twitter Tweet Button</title>. <base target="_blank">. <style type="text/css">html{margin:0;padding:0;font:normal normal normal 12px/18px 'Helvetica Neue',Arial,sans-serif;color:#333;-webkit-user-select:none;-ms-user-select:none;-moz-user-select:none;user-select:none}body{margin:0;padding:0;background:0 0}a{outline:0;text-decoration:none}body.rtl{direction:rtl}#widget{display:inline-block;white-space:nowrap;overflow:hidden;text-align:left}#count,.btn,.btn .label,.btn-o,.count-o{display:inline-block;vertical-align:top;zoom:1}.btn-o{max-width:100%}.btn{position:relative;height:20px;box-sizing:border-box;padding:1px 12px 1px 12px;background-color:#000;color:#fff;border-radius:9999px;font-weight:500;cursor:pointer}.rtl .btn{padding:1px 12px 1px 12px}.btn:active,.btn:focus,.btn:hover{background-color:#333}.btn:active{box-shadow:inset 0 3px 5px rgba(0,0,

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	93
Entropy (8bit):	4.557646177371536
Encrypted:	false
SSDEEP:	3:YPgbVHJHKQJXZjHvAMJd7JHMZLcW:YobfjPH7J8AW
MD5:	6860C2AC649E0EB1DFCE1DFFE035BD8F
SHA1:	D6A1D081934A4EB841902F02337AB3BD4ABA691F
SHA-256:	9D65C695106B65784ABE7D80566D05B18663096EA17581AF0C8619EE5D76379B
SHA-512:	D751A9F009461C024772B9C107C17BEB35EB5BDDF3B9FB05210BF7A0721603F24A3E4E6EAE2ABAE58271C003E23002790DD8D1622A17BCE6ECD96136E04B2282
Malicious:	false
Reputation:	low
Preview:	{"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9713
Entropy (8bit):	5.354114553801451
Encrypted:	false
SSDEEP:	192:ebkfPUyAQgtNBIWguxw68uCZItctpwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0Pp5bt:R4rsCN9cO51r
MD5:	07FEBB7C58E3DEEE5D1DEF444CF8EC01
SHA1:	47EC3853471DBF61CB2E09F1B0016397703DF8C6
SHA-256:	3C4F86E9CCC5E942B4003BD9FED721D599FDEB7BCC1A2DB63A95CBA24DE5F828
SHA-512:	BE6AE39D65F335C3D3CF5E200A6247399B44DA03AA7DEB24A35C85B1E9B29E388FE1305BE6F844759859B2A7C69794324A54DEDADD3F110F21CB8001B3C34CE3
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202301.2.0/assets/otCenterRounded.json
Preview:	. {. "name": "otCenterRounded",. "html": "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

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2850), with no line terminators
Category:	downloaded
Size (bytes):	2850
Entropy (8bit):	5.888252823303287
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt083yDqHSFYc0Ck3Rut7eG9nL:wsbSUtJfxrqLWWWdV6j17yOHuQUJ
MD5:	F03CD69A5D723E7DB1784A603E410F88
SHA1:	54180C881629CA6B173825A827829BFDA66D97F0
SHA-256:	89A202DDD11F873B13EF71695D16707E47B826928E709BBD749B3F41380A7A12
SHA-512:	00FD44D1EE1D2C7F9BC63658F8E6183F930F36BDBB65FE129BDDE16E5511CA3122598F556CB2C536E1B445B393132227F82FB31CA1E2FDFECAF9B14C3F7F3DE2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984344943/?random=1714104722660&cv=11&fst=1714104722660&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 534231
Category:	downloaded
Size (bytes):	159146
Entropy (8bit):	7.9983521451104025
Encrypted:	true
SSDEEP:	3072:HQNAYf8eRkyHVTPgvc3hlcy/6InV0li3VXNvfttIZ89ImGE:HUAB3cP6yey/pV0MZFq89Iu
MD5:	733F54C73EB7B676D4236B4B6ADB642B
SHA1:	72BCDF64BECF3E75D16F646C42D276E9FCABBFB3
SHA-256:	88A19B1E4D458EB05E4F15CE34DBFFCC3EF6403341DB314F9D3DF86B675E4984
SHA-512:	3B9EFC00E5F0A44B8A6612A10BA85E620666F95F88BE2443662204648F94A2C9EB0FF7D5167008D9591C8BBB12C29DA7ADA281DE248076F36CF8F9891EC6CCA2
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1644361842
Preview:	...........{w.6.(....6'u..-'M....;..8..N.VVuh...H.JRq\K.....@....3...Z.......6.....d...8M\..\|...".YuU.F.f.M<q.~6.2Q,.d.....<...E.........x.d.4..b.L.i.V]..F.t......s.u.6...l!..9.c..g..&.QX..y.\..<.vvF.d.-.q1...B.G.l.c.....U..............Q...%.T.&...~92~.....H....:.......n../4z...B.O.7.p...$N.xk...........)...&.y.. .Jx~f7...u}.c.E?q;...C.I,@B.6.P>-..A...(....\6T..&Q<...i.6.-..A.!.=_.P..<a6=...\|..gEC...8~...8.A..7..~]...zn........O.~...E.4M?."l.0.W..Q......3.f....{{..=...:.'.....g"..V.....OO.,N.\.;NG..H.X..h9..h9........".j....a......n..h..........\|....u..$.\...n....".(..Y....a...{u.C..rt.e....0t6./..v.8........../o.PC.]O..2c!......i...-...==x{.......'.^>....7.}..3....&..<z.r...9....=89.<.}..W.3.~...I8FC/_.....WG.[..=.l....=5....g..]>.?.S\|9~2........o.?9]...?...\|>...y~..r.M......,..3...g<...... .[....$C...B....s..{..9.....x.O....y..iq=.....U9.....rL..9=....z...[z....z....,.....`.t..../p9.......q.s.X./...2A...k...W..S/....z#.>........%..

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 93065
Category:	downloaded
Size (bytes):	27597
Entropy (8bit):	7.9916053553258335
Encrypted:	true
SSDEEP:	768:QsGlrEt9VrTtKH+8oNN5aEwAjKkvDfkxi4i:JGlAt9VrhKAN5s9kLfWi4i
MD5:	CB9730521646FEF01A3A198ECE746240
SHA1:	245B35FADE029A8B7D6C732DFC79D38103FB0352
SHA-256:	C0EFB52A8618A35ECA8AEBA777FABACCE01992ADDACA8E89CF240F1F04C3CD71
SHA-512:	E144E66230AC5D72C986E979A19E0BDA6B3D6AD6CCE29B8EA26CB4908E650057E436513426F85DCA1474379D96E2464893A5E79A505549D7EA6E0C73B65C02E9
Malicious:	false
Reputation:	low
URL:	http://platform.twitter.com/widgets.js
Preview:	............z.H.(..<...Q.M.")..X(..VM{..Xr.7#..ADRD...X$.$....u..FDf..@......3.2.....OU:/.,...I...yVf...y.q..............g.......q.O.8bi..(.4....2..`..+.....7.Dv.]\.7e......M.]...{.%Y...........8.....X..t......<e.}....,`g.s.....n...ypv>.....W.r...N.dg....so].K....Co...[M.q:(...?.y...2,....l.....Ib.n....g.yP...Z.vw+..t..w.^.......F..m.<......X....vz....U.......,.X5..Up...M...+>.w..TT...0.u..m~.0a/.vF.M.@]n..2.i....S..h'.R...0.~......Q.,H....h...[c...o&8.....i..2.fV..E.Z..z..........p.lk...rp....<ga.Di..y..-gZy.e......\.=...+...2.OFn.s.).J.../...H.t.,..@.".k."V8..C..b...wc.V.P..R....y.[...e....`..s...,....r.\|...)t...n.+..,..}..-..b.....S6..>=x........p1..xN}>;z..K...GO..O.<./....A8z...??........'O...\|.d......>.....!...ytx0..?............(:z.dt.lA.f0...Q.E..O.....Slqr.<<z6...\|..!....g..hr.MXx.8:<..........*L........n@...,ey....B...U....).G{.A...t.8... X...V.....<..B.8..\|..A$....a....B...!\..`l....5..e.~.X.rh..a.......0.Z>....@XP.A.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	142031
Entropy (8bit):	5.322595697541325
Encrypted:	false
SSDEEP:	1536:AZMKnCMFCNJoAU0gs82klckukSk2kd9qIMEcj/FSlYR7tM0v7B:QMKnCqC1kukSkTTYRl7B
MD5:	854B0855658A1AC6D710C6F52793EFEE
SHA1:	7E4A8BA7351AF3CD9363C6F42685696C6B8F3F01
SHA-256:	C55CBFA5B4E66D02AB3DED93E609BB5E77218AD0841482CC3239371816338CF3
SHA-512:	FED09FEF0E04E375B6FF29F2320ADE053A95451BAB4AC9FC37BE96E1C6480F3863AC8495FBC6EED5AB15013BE62270311955774B9A549890ED94FB4ED468639B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/c4657020-c7d1-4a14-a091-267a7ee4863e/438838e0-2800-4410-b44b-37a1d246db65/en-us.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Cookie preferences","MainInfoText":"When you interact with our mobile applications or online services, we and third parties obtain certain information by using automated technologies, such as cookies, web beacons, and other technologies described in our Cookie Policy. This information might be about you, your preferences, or your device. You may opt out of certain categories of third party cookies, other than those that are strictly necessary to provide you with our Services. Expand the different categories for more information and to make your choices.\n<br><br>\nTo effectuate your right to opt-out of the sharing of your personal information for purposes of targeted advertising, please toggle off \"retargeting or advertising technology\" cookies below

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17399), with no line terminators
Category:	downloaded
Size (bytes):	17399
Entropy (8bit):	5.604372587813531
Encrypted:	false
SSDEEP:	384:yAtgZqMIuvrW80CeIgT/yymdbJedb9FWU9GOpXBPYqWFUngfzMKuVrE8GCemgl/k:AxDJ0P3DHCJq9A2zpiHknlLGPx5lQJkA
MD5:	11A5C5A2C007E4E37F0D941894833E98
SHA1:	E83DCD5DFC6EB7720562215BC8F89060D00A7579
SHA-256:	D1BC005BB66AA4BB4C10786629D6021E9AD1EE8B76A86287FAC34AE016A6C5BD
SHA-512:	1415F40614A6DF34D15975EB5B89D5C6DF8370DC9145C26B15A9C699C5F3E47EED2D5DAE143D701A3639EC18586BAD5BCA22E0670ED501DF4CAAB40188C6EB2F
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/984344943?random=1714104722664&cv=11&fst=1714104722664&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j481831569","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481831569\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sEI-ckg!2sZlK2lA!3sAAptDV6s3IU4"],"userBiddingSignals":[["468327996","455615919"],null,1714104724492598],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161731983564\u0026cr_id=694222103922\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 84796
Category:	downloaded
Size (bytes):	18996
Entropy (8bit):	7.989210549410192
Encrypted:	false
SSDEEP:	384:Pndcq9c5U3OKYTqtJRTWLfvLj3OU2fy47RAMz76OzsBWT+WDzb:P79c5USAMLHOUEyQBzs0L
MD5:	55C59F666197B7335778C9C7026D8AC2
SHA1:	A06805611E338A5EE3B604D16AB15A5CA7E280DD
SHA-256:	F651509AFA984760BF38BAF2087E32BCA361E51469824980D3A0553DA273E562
SHA-512:	69A14C50544627802F9181B4B80A35C990F04156F13C52765B5D4305CA7E0038FCF1470B87435E89B36D1821AD0C055D7A03DC6C611568D7E357A2E28E84631C
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/plugins.js
Preview:	...........}.[.W....+.\|.AJ..O2_F.d.....kp.,..H.t,.......[....d;3sw..&Vw.g.:.:u..m~.8.9.......'....V.k..dk...l<..Q.erU.........._............y._^.Ig.....e.!9I'..x..;X.E>.&U6Jf.x..WY...$......G...dX..s.OF.m/....u6.{Iv7-..Uz.....\|.....d}.......G7i.........G......?Nv....^.~....k.u]...yyL....X?..'..'.._...u.U. ..2K.l...Sg}..wU.'...?..j......Y.S.#..5\|x..W}z...J....nR..g.W.~B.._....N...bV'....x..d........u...u..s..Cr1.._...A."?......dXL..?.Y=+'U....=.u.s...p;{\.s1..{.!^.$.D..9,...U.eMu..y~A......I^%....t.Kn..6..u.X..guF./&..1K.W.T)..`.Ci]...`.j..@(_..>._.v8C.=.'.xL._g.U1..w......W..jc.),67.......)~\|....1`..._3.0..Hg...X..,.xk.On...u..@G.D.Z-.@.C..yE.b.....A....^L.l;;..Z..e..A..E:.2.....CR....6q(.......v4.P..@s=S5.....6...c(.....34.T..(...YZ..].V..`cZ.g.K..ww}J..9..-.......'.%..,OuT..!.oGu....9,fN?.ZR..../..Hm.05.:.$.......vrT.y.y'.&_\|..hT..y.\|.(..C[.....S.-.*..(..X.=..&+o....q....W..~...~.=.....LN.M^f......I3......K..............T.!t

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 201x230, components 3
Category:	downloaded
Size (bytes):	13174
Entropy (8bit):	7.82965328579702
Encrypted:	false
SSDEEP:	384:xYNg7rMQwu0Oxc5WnAoJlWdrbypr39ZyI7+Re:xYysJ75mAoSAx57+Re
MD5:	7A069D668246700BC8179B683C5A0D6C
SHA1:	AB76F7208D487F989FFA04CD9A9FD3E8BBEF7857
SHA-256:	024B6DC90D2C4A73B933CF55FFE1A1E2CFD24713C49B0B6A6B33D6CE309107C6
SHA-512:	73B31E1569A6000D3D44E15C29AFA1994132FA8A1EC6EE438EA9C77B242B43DDAEF4AF2B69FD91ECE52440764D9171DEEACDFA5ACF538C2FEA686D1A2AD7A4C9
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816
Preview:	......JFIF.....,.,.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 186465
Category:	downloaded
Size (bytes):	33650
Entropy (8bit):	7.992314121426954
Encrypted:	true
SSDEEP:	768:EC3pjZEASvidgChAplLA9YJ0owjCtTT1dO63f:EC3pjZElidgJaeqoks7O6v
MD5:	D6E1430CDB7701A629134EAD34FC29F5
SHA1:	9A6D0BE9E35CA64E87629CA5236089CF1CB10077
SHA-256:	0339DEA287235E5CAB1D628D2BFB5D83B46DEE3136AB186DCF73D5B7DB9679EC
SHA-512:	27E4B49C02C4A2FD5C0DB6304DE4567793F5F27B1772542048A715766A98EAD839BFD01AC234360CCA88E0D09D84787217D087FCFDDD232A3A6642A18C8F4E64
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/lang/en/stl.js?buildTime=1657307797&
Preview:	............v... ......woW.X.]r...l.t-Q..k<..$!2K.LV^$..Zk^.....8k...~.?.?./9..@&2.L..].....d .....@ ...~..Z.7.z..F.n0.z....>...?v..2m..<.. ..ysu...Y.K.(.,.......e..../D..4YIR1..A.A.k.2......._...."I..w.u3?._.#...k...y..8.=....{..S.\|..?`s.......\q..5.B.......m..+...>.K~.A..E...I.g.=..i....#-./....{q,&.q..Q:..V..=.. .L.l$.4y.~.en......P....o.h.2..Cx.._...P..q.=...._..>..'......3...............7(.......]._>k...>.?...{...'.{.U..x......z.n_..."N........a...d...%.8...Q..A....z....)..A.....F".4.'./.~..?=mD.iCr/....b..S.'..f...gb..&..X.@z.(L.3qm;.H1.Y;..QQ.H.....J...J.3.69..j...^..Y..B.._z..?....Q.5.....P..W/....9.5.I.....j..d.'I'..S...>TK.Qd(...C].\=8...........K.\|.;~8.R..j.?.r.@...H.rkE.}.w.^.9.I..Tp.Q.{.Enum.e...d..g...a.Av...@te@..y....T........<$0E...;..2.....L..$...e.K.5....v.84..~..._........Q........{.p.%.....[..R..).....[.C......(...&.L......Z.A.6....O30...T..&...^S.7...(K.4".t..I.K..}.UX...:.x..1D]Ws..3..B.^=z.QPU....L.8S......;.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 13081
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	7.875169129631042
Encrypted:	false
SSDEEP:	48:XIlSE4OTJka3q9TGwQyZ3uXdSwvAP0m74LAt:4lSwJk9yyl6ejML4
MD5:	AD5BE77AFC22E3EBBE25D595A8157B91
SHA1:	0027BB36D92EBC536FAAD9B60E907B08820B69B8
SHA-256:	6231AA864B6D754885BF20E052CCD23D17C46B71A03847C10F75D83A2273F6DE
SHA-512:	5EBEAAF25552277CCA9216950602529F52AB1AA2F4A5141CB0CDD3D44F26E0962D3206BE1D3C0D89D0F791109C84A85209F6A40425462D69EF41FEC1B01F0019
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/css/social-icons.css?buildtime=1644361842
Preview:	...........Z.r.8...Wd..$....f.a...m.l..E.7.....GKj..]MV)...>F..<..5..W._.S0:.<b$...<..y...5.3...L........Ua....e.k.z.\.).?..7..g..[N.O.1=2.f.O.k..D...4.qL.1..L..t...5.......u.V!l."?.r...mY..m..5zZ...).lE..7.~T.SB.'./G.q...q..0.oC..W$.ei..?.}...h.o..y\|.DGd......r.JL...dr.W.{ 95.>C.p.WH..&.,.......y...`lp.w% %,..5...@Y...k...i8..b)2D.T.`J.<hC.`S.A3T'.r...3...DZLq04.o...S...Q.:.2.s>.I..S.a.....qB...Wl......$..0..O..U...S.6..WV.u..S.m......".....X.6L&.Y.R.......+oW..@...M.K.p...9.3........... ...}r(...l. P.[,.Zk.....S(E.(......mG.lj h...A69I...m.`..[\..b=..!.f.#.dM,4...m....h..e;......6..H.[......IsM..Y..Y.9..K...p/.dlN.x.^Z.:$...9(j.Q.{...............^"L.....x.x.9..Y<2.......cj%....Q.D.K...M..q....8}..\...._+.gS...)..CTI...t...<..P.#...~......f....T..{......KG..........:..R..*..?........pN..Z%..Je..K.LhW.M..=9.-....<..,.....d.-=L.J6D..8......E...{........VWP@./V.Zt8.\|.5E..0...;....9.75.t.....l....]+[\,.o....~.._1+..9.,...:....o....U.%9.6..

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13165)
Category:	downloaded
Size (bytes):	306272
Entropy (8bit):	5.503087522316648
Encrypted:	false
SSDEEP:	6144:cVPCQYGPGpcMj/yBNtuoAgai3YPhpR4JXcQM:cPa/yBNtKJ3QM
MD5:	B29CB3E4CC90E33A7725D240A0ADC31D
SHA1:	1D20F332D7D39A531CA253CE19E7D5DACEDBC7A1
SHA-256:	AB9D83CD4064BD9567F0F1733CFD2A2DA26BCCEB4A295C53860370CF6D60CCA5
SHA-512:	DD88AB92A15E842C114EA890CCDF95029AAFD45B612989A1665CED7F55849755CF9ED89C049A22F94E754DA9DD96D8213BAC12331E39C6C1B49CB44D8A1DAD48
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=412d488183deed30a0ed746ecb78fa41
Preview:	/1714104688,,JIT Construction: v1013068429,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 931
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	7.448173118564277
Encrypted:	false
SSDEEP:	6:XtlqRHy/71Fmnh+5c/wYSBUJuVqS+Y8WH6zJ8KWvpWCrvzEZ8yyKfD3U93Wj2m/n:XnuS/JF+UcDuUJuVqNYAKBZr7EZ8XKYW
MD5:	08DC65281C3DB6670B9435F5EACF9CA6
SHA1:	C5E20DECD47C1EB8B1A859B4DEA05F9718C8428A
SHA-256:	0639DA6C79900ABDC6F5BD27479E94B5CBC8DAC25B2C9E5317F66AD8F34A61E9
SHA-512:	2D07EC71A50047994BE8FDA34A22D27CD18F496BC8C8EA376E0EBEC857D97AAAFF1F3C9435E24149A9C1049712CB2983729BF387EB53321CB91D5FD039845D85
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/images/public-web-styles/ui/spinner.svg
Preview:	...........]O.0....+..F...%.9a...+...B...T ....{Z.....7....9.}Bb.9.^tiR\X[/..m[..j.@0.....d{Wu)f..8...V.m.b7-......B.V...&.+YZ..)6.K.l...r..quS..F6.u..O..H.:.f..0Ds*....Y/N...7c..U.......k.. .v......_.^..E.~.(......^c......:..:(.aw...^..5Fp..aL#.Gk>....#....B..C...._.0A.p..S..R..5$.T...X....R....o.....?..w&....0.......w.p..q.h.i.....!..l.g..3_..9a....z..;A......

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54542
Entropy (8bit):	5.316616974798103
Encrypted:	false
SSDEEP:	768:y+jT6cQxwM3Yo3osRBQkJzJ6hIXYIhNkNtKl:T6cKwMIK9
MD5:	89AA81A4CB87C5FEA11EE5D7DBC21ADB
SHA1:	766F60B7CEE246C1EDA99F7792F15D8053775F00
SHA-256:	CC1A50B00895277127B53B730C70111D78D38F2A81FC3F19F2710CBF83C4820C
SHA-512:	278DD11F01945151B5A27E0E4A8E0471C0DD7CB79406E68107C28A974B4ED0EB77BA9BBAB45278457F42C5F1AAA0E5842E9D75DAEFC01EAED9A1AF2141BFC4C1
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/datafiles/GgFmZYBUQSpoEuttY69TDr.json
Preview:	{"accountId": "8447815042", "projectId": "16952400626", "revision": "6268", "attributes": [{"id": "17416863509", "key": "device"}, {"id": "17430031856", "key": "Test"}, {"id": "17593460738", "key": "environment"}, {"id": "17891951313", "key": "hasInvoices"}, {"id": "17945340436", "key": "routeName"}, {"id": "18165210497", "key": "countryCode"}, {"id": "20110833614", "key": "signupAppName"}, {"id": "20441875299", "key": "itemsOrReports"}, {"id": "20871681854", "key": "request_target_token"}, {"id": "20876861005", "key": "locale"}, {"id": "20885810481", "key": "unitToken"}, {"id": "20898770097", "key": "requestTargetType"}, {"id": "20904131342", "key": "activeRequestId"}, {"id": "20907490018", "key": "hasPlaidFields"}, {"id": "20913900298", "key": "requestType"}, {"id": "20917850830", "key": "activeRequestsId"}, {"id": "21278211989", "key": "isRetailFreeTrial"}, {"id": "21304040408", "key": "isSubscribedToRetail"}, {"id": "21305002600", "key": "belowItemCountThreshold"}, {"id": "21317371

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 217x249, components 3
Category:	downloaded
Size (bytes):	9280
Entropy (8bit):	7.955032045514248
Encrypted:	false
SSDEEP:	192:JyRSLQJT8YM/FSyf6dnqrpRd1lx/jdcgcMUeraNu0:YRXxLM/4PqR1XdyMUuaNu0
MD5:	28973745F066D278E135604F391F61E5
SHA1:	1B924E140117DC050A8EA401EF04EE8A64A64DB1
SHA-256:	9FA900381B14CE0AED259BD0AD54706DF6FB65BBFD0CC134F3268F87CBFF6DF8
SHA-512:	C9F08086B59CB67D3A3DA574E725DAE968935F2E631C15CDDBFF06767F44B67A419451C42BCC6A4C8D59BDCBA7B5CBFA2D3291E22273113D07F1F943A8250A78
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/dsc-0069.jpg?1561336383
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................E.........................!1.AQ."aq...2..5Br...#$%3R..4S.Cbs...6Tc.................................%.......................!1.A.Q."2Ra.............?..d..:(...rx..A_.....i.l.b..l/..}..b..j?.O.J.E./.....n#.&p.Z..M^[rY.......%;-.X.sX.......;5.].6..m.S.n.VW.XA(Lu..R.K6[Z.....\|.....C...5.K.,..N..&.!...........\....h....<.p[....#[48.Z..<.Rj....F....{{ ...!#.(T.y..o.Sf{d..').t.y.0....6...g..(uYaii.#M.;GP..-o%...>.t..+I......FZ^3..+.}..e.+h..He.c...e.q.+i.......L%.Q.{%....kA,Jh_^..w.......r...6..A#6n.Y.x....h.....^.M...6^........'!..v.t.!....%..k...C.,...].@.J......EW%m...+T.3F.6U.F#.FS....5.E ..@.w....+..z....o.?..Z..$........Z...7..L..5..26v..VO.U..U_......U.....`.4...h..]..-....qu.X.."......8..l....s.D.Z2q......#K.....<(E....'.G7...#....\|t.e....C{.....P..

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1677
Entropy (8bit):	5.127981986286851
Encrypted:	false
SSDEEP:	48:xMVHsyO9F21CTfLLG8maCSKAtwoAbWIngFh/dX:x0NOSafLLjHC/AqZg7dX
MD5:	082AA9A2B863CF297C3696BFAB81C7FC
SHA1:	34CE55D23FEA6C14D5236A3BD4B98526142C6E35
SHA-256:	70955DDDCD784F39F2C4DFAC351F377A8E7CAB12676FED11C419EFD61E472BF1
SHA-512:	32356F8C392A91A0C5F8147DF48F91F4D88DC5627D07C5732E6FA05DE3FA7406CC90CC517A9595A9FE4020F2A95DFB33AF64A894481FF9FBEB14573882DD8DD3
Malicious:	false
Reputation:	low
URL:	https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade
Preview:	<html>.<head>. <title>Square Analytics</title>. <script type="text/javascript">. (function() {. // UUID generator. // Private array of chars to use. var CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.split('');. // RFC4122v4 compliant uuid generator. Math.uuid = function() {. var chars = CHARS, uuid = new Array(36), rnd=0, r;. for (var i = 0; i < 36; i++) {. if (i==8 \|\| i==13 \|\| i==18 \|\| i==23) {. uuid[i] = '-';. } else if (i==14) {. uuid[i] = '4';. } else {. if (rnd <= 0x02) rnd = 0x2000000 + (Math.random()*0x1000000)\|0;. r = rnd & 0xf;. rnd = rnd >> 4;. uuid[i] = chars[(i == 19) ? (r & 0x3) \| 0x8 : r];. }. }. return uuid.join('');. };.. dataLayer = [{ "uuid": Math.uuid()}];. })();. </script>. Google Tag Manager -->. <s

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1036 x 414, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31949
Entropy (8bit):	5.686373520422217
Encrypted:	false
SSDEEP:	384:m50wNt+5X8kpETEbamy1yCuF3h357QKMfjecerZmszmS:8rtM8kp4fMtPM+zmS
MD5:	E9221A340230248D714D7D6983E72CA1
SHA1:	A052DD3E500A102551B1F707D6AA39D4A3BD4BD8
SHA-256:	E11E7676CB4332944AE6C7A9ABD2B87D56721EBBF87227CC2DAC0A7C343B3A16
SHA-512:	E4F5A228F6A19F2E8CAACEDE3AAD48B314D70AE5915D87751BB77169B96DDB85A963A6807B440CC48880144DD65DA0112A073131D476E17B0F25FCC384772F1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2744)
Category:	downloaded
Size (bytes):	27113
Entropy (8bit):	5.554612618798311
Encrypted:	false
SSDEEP:	768:69oUlMB5rDoVkSVPGe+eGAL7QmSZBTLVFZYYMfVBFt3Rcybruoa9XPeJaxz:AtGUKZ5
MD5:	63C5E0F65A278CDA7BC73C27DC91E99E
SHA1:	8B9A9F324F34EA00655FEAC14B78F77A35E68651
SHA-256:	9067BFC2F5A16257EBA025EC1D59E80CFC8E7064843149C9913119541EE1CCFD
SHA-512:	1BCD14952B80C749146ECCBB041FB83E09010665F72D8B58548DE2859A52EECC221984983A194576782F4AD888156DCB11B8C9A71DD27CD47E7365952289C75A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var xLa,yLa,tR,uR,ALa,vR,BLa,CLa,DLa,ELa,FLa,GLa,HLa,ILa,KLa,LLa,OLa,xR,QLa,SLa,VLa,RLa,TLa,WLa,ULa,XLa,yR,BR,CR,AR,DR,bMa,cMa,dMa,ER,eMa,FR,fMa,GR,HR,gMa,hMa,IR,kMa,jMa,LR,nMa,oMa,mMa,pMa,rMa,NR,vMa,wMa,xMa,qMa,sMa,tMa,zMa,MR,IMa,JMa,MMa,LMa,PR;xLa=function(a,b){_.H(a.Ig,1,b)};yLa=function(a,b){_.H(a.Ig,2,b)};tR=function(){zLa\|\|(zLa=[_.L,_.K,_.N])};uR=function(a){return a.Fj};ALa=function(a){return _.JH(a.entity,-19)};vR=function(a){return a.Gk};BLa=function(){return _.GH("t-9S9pASFnUpc",{})};.CLa=function(a){return _.HH(a.icon,"",-4)};DLa=function(a){return a.Im};ELa=function(a){return a.ej?_.FH("background-color",_.HH(a.component,"",-2,-3)):_.HH(a.component,"",-2,-3)};FLa=function(a){return!!_.HH(a.component,!1,-2,-2)};.GLa=function(){return[["$t","t-DjbQQShy8a0","$a",[7,,,,,"transit-container"]],["display",function(a){return!_.JH(a.entity,-19)},"$a",[7,,,,,"transit-title",,1]],["var",function(a){return a.Fj=_.HH(a.entity,"",-2)},"$dc",[u

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 454069
Category:	downloaded
Size (bytes):	131730
Entropy (8bit):	7.997465289678108
Encrypted:	true
SSDEEP:	3072:Xu1HexC+BfDdCeDAxNYsYxnhGxJLyZTdnQnJvjqF:+9h+BZCkAmiSpgtE
MD5:	C6B909F7047209A484D5943745C524A6
SHA1:	056F7E9D22D42D5545BAE61589D20B5A98056E1F
SHA-256:	38F8C1FC36C5882238A5C85271F42203A4F1FD3F51522344933C9BF4E023F810
SHA-512:	16CE6DC0CBD54F0921F352BA21E0642CE05F59E3A48E2CC8EC25BD6B57173283C6AA5DE2919CD10EA10D99BF35A1D46AFF5BD99A8FE9C0DE14215B62EC6CD15E
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/chunk.122.426e8f84698648d4843b.js
Preview:	............[.8.0.W.O...%$.($x..Bw.~.m.{..$...;..RJr..w>$Yv...}.y.s]g?.%.4.H..F..}....~.O....I.N...s?>.it.\O.8=s..6...N}2M..^.....w...h... .m_."v.T.B1..W/.....g........N0.e......h.......h.p.....IWW....`...m....O.qX)-b.O.q0I...X....{.c..8....uo2......,,......n..`MS..Iw......>.....V....t<^q5D/.w.@.n.I.Z.,v..S.....2.2.I....n...&].0.GA.K.......B5..Q.%.CpK.\|..1P.....g....Ii%....0...x.c..f{.!.Q8...:\|.....;m...B.._...0O\.2c,...0h.........:wx....n..,..j..;.!.F...{.Cn0.N...@J.b.n..S.".F.U.zq.>...i.+)...{'..cw.....TQ..>..x.)$....<I/....^.&.#B.O......3G..CTX.p..IR...3.Q.~.i.....ii$f1..K........uY.....jM.L.u.n..+.....8..^l;.j5.;j..p.Pz...^./.^.o"..;.D..Hp6.1H..w......zggn..T.q8:..e.0......."....TL.u.;v7VS\.bX>"7..d.v....Q0.4V\7R.<B..=..=D....C....bv..(.C,9r..8."......V/.yZy)..\w2..._...(.....Lc..."..Uge.P,pO.72a.....O!....0.i........\|.}..s..f!].ao.Wy....2rS..&P....<.........!32..t<..H01.zt..^.:wQ..=.9F..C..J.`....l"... .*k.....w..oq{?nO..q.kLl....<..S.8

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 210892
Category:	downloaded
Size (bytes):	29654
Entropy (8bit):	7.992275973977337
Encrypted:	true
SSDEEP:	768:7Brv8RtQCh2kf7NAuRUEtcFrkRylPUw17lh0Y68SytpD3:75av2kyu+pyWNvh0T8zD3
MD5:	BCE59FF1B61B085485681AC3613007B2
SHA1:	E2137F7ABAB0A793AF74DB9F904B38D5A39F5998
SHA-256:	AA37C7E282434EA581C246F516CE1DC1F9151000A64553A8758F5B31E0529E4B
SHA-512:	499A46EBAFA761412BD1469E4504DBFAC6A85C45C95CB07952EF062D6DCCE94F0BBA2058629B5B6ABE2F4B0B554EFB67EA4DC2F8F74754C72A7E7C073CE1046F
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/css/sites.css?buildTime=1657307797
Preview:	.............. .Wx..1]....C.Rx..g.......wvtP.UE7%.T.+...d.E..U=.....D..D".H$......l.x..NyH.g...X..r...."?...I.o_'..]0.o_?~.?...l...y........x(.>~.O....x..>fI......-....}.n..<d..]...}.\|.y......W.s...^~/V[.#.ww.%/.>.....o).<.M......O...!/.c...$...c.\|J7.;.qT...f...ny.....I.s.G.;..1....KE..hq.K<!:@.a B.....,q./..A.'..Xw...A2.?.-j.mNl.?{H..y..Gb.h#..B3....1.t.. .M......R..8.Aw.........FO.q.W...,....u..~...3..Wb.MZ$k.M...n..?.h....1)..:..8K..w....w`.CDH.....h.)J.S..."I...=B."?.'g...HL\|.b.=..X..b..+..........y ..X.y0..8z........EU.Y(a0ge.S...@E`.JGs.}.@m..K...e.D.L(. .. d........+......W.$....?....U...K6i.\|.{&..p......<....v..\.....6\|..uc.T.....6...u..T....6...uc.<6m..e /...S.,.....?.F7.A5l.....?.B7.A.l.....?.B7.A.l.....?xl...4..g....\...........T........U...T........U...T......?.Y.d.....v..\.....6...u..T.....6...u..T.....6...u..<6}.g....l.A..Y.;.=[2.sg.z..F.\|....;s.%+=w.g+f.....n.=a..9H.f.E....$c...>X..*.U....WmP.h\.A....I..u......4B..M.%."..(E

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8652)
Category:	downloaded
Size (bytes):	15525
Entropy (8bit):	5.318944945759572
Encrypted:	false
SSDEEP:	384:QIim0sKymy8W2Cu20u6ZgMiWWIRdz/qBBCuvw4Im+gSU8qH:QIim0sKymy8W2Cu20u6SMiNcQbCuvw4N
MD5:	0A3FE4E2865E89C528B4FEB04144853D
SHA1:	7E172C21909A193457C1F6F731118B07FA1D2CDC
SHA-256:	CDB034FD65BF6818BA6FEBFBC6B1343855D6E09730B5D7FD456ADF500E1945A4
SHA-512:	BDB8419CAF2C48AE4DDD2CC047E5467825A5BA14AE5DDCF3069BC0D85E6D0B8D2E46B4B06178FD4FEF7912E9869E08484538A888B3F73FFB584AB4942E1AEC8F
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/mM84SfiWlvq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("XControllerURIBuilder",["invariant","URI","gkx","isInternalFBURI"],(function(a,b,c,d,e,f,g,h){var i;a=function(){function a(a,b){this.$1={},this.$2=a,this.$3=b}var b=a.prototype;b.setInt=function(a,b){return this.__setParam(a,"Int",b)};b.setFBID=function(a,b){return this.__setParam(a,"FBID",b)};b.setFloat=function(a,b){return this.__setParam(a,"Float",b)};b.setString=function(a,b){return this.__setParam(a,"String",b)};b.setExists=function(a,b){b===!1&&(b=void 0);return this.__setParam(a,"Exists",b)};b.setBool=function(a,b){return this.__setParam(a,"Bool",b)};b.setBoolVector=function(a,b){return this.__setParam(a,"BoolVector",b)};b.setEnum=function(a,b){return this.__setParam(a,"Enum",b)};b.setPath=function(a,b){return this.__setParam(a,"Path",b)};b.setIntVector=function(a,b){return this.__setParam(a,"IntVector",b)};b.setIntKeyset=function(a,b){return this.__setParam(a,"IntKeyset",b)};b.setIntSet=function(a,b){return this.__setParam(a,"IntSet",b.join(","))};b.set

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x262, components 3
Category:	downloaded
Size (bytes):	6375
Entropy (8bit):	7.913606469674254
Encrypted:	false
SSDEEP:	192:uctye2+racbkCUTJDPpfRv4mT720Y+/miV52:uA2IjkCUtDPrv4mHdk
MD5:	D09A424D28A5F05C4497AC8FF6BB8043
SHA1:	5A972A264B01F3391EB16AE1E0ED82C2DB18A480
SHA-256:	F5C3C0429A9D66CEADD651F9E41BA479CD1CE5F5EBA9ADDA8430B26D23FA8153
SHA-512:	1E651DFC91D66FAAB4FBE05D74D96F8EF08448A0937D04F9E71D3EDAB284F0EB81CB3EA55ADA7A8227D5DCB3C72C56B33F70F402FE1BEF423C8C8C501CFF6FBC
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558
Preview:	......JFIF.....H.H.....C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA....................................................4.........................!1A..Q"2aq.#.3BR...$4b........................................................!1.."2A............?... ...2. .. .<r..Q6d1}....h.s...0.4...0t..ly.....\t.v.,;..h./...0V.k@5....3Z.Z.Z.Z... ...D.".e................N.F.g.ur....8[.S. .4.r.^2..p.......=.P1s.7..s.-h@>.....[#\.<...)..0H..$...... .........l....a.o.6..GP.\|.M.T.@..-.f#v...P.=...-d...L..Cc;.n.@T.&;..O\|...&a.G..;.......Votq......d.Z.#.G...Q...4.Xr...H"A........&E......h...D19....gd.Ku...p!.....r].t...1.B..L!...Y.L.K.h$.\S$......@N.....#o#....wL..1$.....ia...i./p...X....N...D..mc.._......5.D.d.@$.@:./..H...^..........j.K.>.S...s.a..l.<..@..f.F.\m..X.<B.\..e1..K..8.u..,Lf......I.#..........0.....f.CO...m..p.>.o,/{...<$M........).=.=.<./..U..#.. ..Z. ..ar..r.n@-. ..<..R

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2636, version 1.0
Category:	downloaded
Size (bytes):	2636
Entropy (8bit):	7.750973899817655
Encrypted:	false
SSDEEP:	48:mHeXlnloLGEgsXsq4Wj40Xb6kw66mA43j8lf88mMQkQfEOonzX:zll4xgsj4Wj40XYsA4OXmMQqOuX
MD5:	0E88795B66EEAC48B209209AA0179411
SHA1:	983E16566390F9167C6C4FBBDB052623FC01A631
SHA-256:	E8106B06FAB14948098CAE97983EAFBE1A60643AC725B2A029E4DA57D43854DF
SHA-512:	17D37DAF132D97D96B8E927E920A3A0F152FAC0707DC1268B9ABC69DB2577C9D6846901A44C2C596908CF45597C3FD8F74E3D2358F6B10FEBC403967AC6F4B69
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/fonts/wSocial/wsocial.woff?ts=1713474201933
Preview:	wOFF.......L.......`........................OS/2.......C...V5.A.cmap...8...;...R./..glyf...t...p...H..\head.......0...6.]..hhea...........$....hmtx...4.......D#...loca...H...$...$...Bmaxp...l....... .&..name.......%....4.T.post...............x.c`d.g...............2H2.0001.23`..i.)......0....A....#P..$.......x.c```f.`..F.......\|... ...L .g\|....... ,)F)...0`dc.....\...x.MU[l.W.>.\..efvgg....{.q..%;;3k;^........4@...:IQ...C./)......E.T.(/...... ...U%AAU.T.........u...9...........B...Wa...q........J.N......~...GVJ..3...9....S...[9E?..........%3..U.....A..i.e;....F..F.a..!.#.w........W.xz...L75=.J...JKU.......Y...5`.......7...~......#8y..3.M...(...I.......{.c.....=?px...F.y>.L+..F..U/....,..v\|..@..../.]w.u...7.7>=6.1[.k...iL...j...7b.O8Gd."..]......r}.B'..Eu....r...o.Yk.Ux`1w.[........oD.wH.L.....C@1bD1...........,`A....?......f..[.....o.....$..px}.XuS.N.8qZ....@...'..g.\..m.x..b...$.HH..,@.!z.<...uv{......[.._...}x...y.Vsu.../.5..[.B...Wp...I.....

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.280052635092167
Encrypted:	false
SSDEEP:	6:6v/lhPfOSaRquXhkrTLI8SY0LHD5AE5hJQ2cheVp:6v/7eSaDik8SY0DD5AoJtcO
MD5:	388940C42991EFD9EB33F133E3280696
SHA1:	C6B4C460D1CCB5833DEB7844423C54C5F2CD2394
SHA-256:	D65F4B2E8EEE94DDC7F762D098DE19558D879A3B597C8913B4D075532E3ED4B4
SHA-512:	5E103C4E4FAC6343E7A133DC80970C98D5B843BDCA4C5E613F9CAAA5BD295C272E7D3EDA1937FB553CB91111497A25B33DC8B8AA80157D49E92BB70BA5F8F476
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yD/r/FEppCFCt76d.png
Preview:	.PNG........IHDR.............(-.S...`PLTE................................................................................................\|%......tRNS.....!.\4....v..2...)....~....CI}....[IDATx..G..0.DQ............Ydv.!.}/j..9..b@.....u.........3.....40..n`q...^.\9.qH..~..._..H<.\|.....IEND.B`.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 34900
Category:	downloaded
Size (bytes):	7673
Entropy (8bit):	7.973171850244895
Encrypted:	false
SSDEEP:	192:GTzxEHK4lDOu3F1RHLN/XgsSaHXgXpp8Xook85XPhHJdyM+/:YzxeDP1/p/XpSaHXgsXo6Gp
MD5:	52F8C4671CE2BECAD6AE89B163F208FE
SHA1:	F814AEB201A2AB65988718252EEEFC81D80AE42B
SHA-256:	70714C34A79A31EEC89B0698F603AF21E8082E50CBA2AF8929F398C06C046064
SHA-512:	7D87D8B2D1FB22933A45B71C0CDCD42AD4B133605251E9B1AC5B84FCA4241F7D4C857B39B53FE0BB6CA8DD921269CAAA25A88346F4B370ED3EDEAC561F440B06
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/questionnaire.html
Preview:	...........=kw.6...s..@.n(.z.z?,e...I.8...8W.. .1E2$eG.....\|I.-..nr......3..`0......:z...1...k.w.?..l.0[.....N.p....'40...c....V...).'......k6.c.2..vlr...`.U..`..J\.q.....3..f.F6]0.........J.T..m\|.P.W..ym'.7<.E2........O..LM.".]"..2..q.!....g.......O<g..E.Ys.y.....U......0y..W.gQ.....:.zU......[u...]./[..\|pgy$..u[.....{......p..;..@.w.P.D.....b...J.7+7).}...h..s..,.,.i..D2.\_...u. ...........M.83..Ze...........,M./0Qp.X.}N...@......~.B...5P..?g.....d..}..A ..Z5&v..&f.X!......_....iM....j4.-.......L.&.).......~.2.c.DM.{._.f....%.c...".`..[........k....z....~....A..}D.#R..)._.9..b.5..S..taZ....!...R.../.'.4.N\=.c.I.4...e`W.}Q../j.......z.jA.....p...^E..Y\|....v...q....(Kqua^..O&......Lwa....{...P.....c.1..[....;a-.R.O.oQ....B>f........rs.6j.........&.....x..}s....R.T..Y.#..0r..{..=.4[...fh$l.!.._d(6..`..&.......a^./Kh9..+.Y.z..\|..>8..M....7.3.....<.l...h^.0>.<..z.NnN.[..V.[..f.~..o...LK0.S...B7*R.<.D..1bPnQ8...2ou$...6.....B??E......A

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3507
Category:	dropped
Size (bytes):	1488
Entropy (8bit):	7.850471736908333
Encrypted:	false
SSDEEP:	24:XRL2F3alDmrNn+UfGiT3V4Vx2InxQxOVSy+tzc4/zJklNURbbsXo0YP6UA618odu:XyOi5n+y4Vx2ImvjzccqlCRXn6Uf18oc
MD5:	0D1C9FB7005532E7B245CFDF1280D805
SHA1:	2466421992F1FB0E44829833AAEE7AFC0E5AC7CC
SHA-256:	8691B92EED1360903B2182D81E491C80141D0CD051366CE3E8C4F359538EB1FF
SHA-512:	DC8AD32D6036B5A06CF7C1847C071BD53C6D71325087F0FA316FD9B14EC6879445CCAE37238DE8FFBEDD80D4F73296DA161512336BDE3DCA4A9030CB0ACAD695
Malicious:	false
Reputation:	low
Preview:	..........uWMo.7...Wl....(r......D@{q..i/.9.F.bK......J..T.%.oG.......tw.......v....n....j.........\|s..c.=n..5l<.?..z..y.......wO..w..E.........~}8.......#..~5#....N&.n7..............M...v._.v.......f....M.c~.M.....z..\..t7.....7....as....v......E...-v.?/f./G...ps....a.b..Slw1.?..V.f9...^.S..p....~....o.gR.......cy.......c...S.......>\|......x...N...........s...c......R....J.:J...:z...M..).SK1p..w.$$.."..d!..p..8..6..I..bjPq.!.MpQ...}...8(.$x.Y(PW%......0..EYY....&.S.V).:D.)...[.v../....wY.-.....f4Q$..4s.@K.T.$..i..N.K9S.\...G.B....X-..R6i..A.E.aR\|..u2-IW~):..M.N.B.%c5.R.(.{..e...$..M...%..].0;T.9D...W8L....7.=..xy...G_.......8z~U....-0.......4.K>D.I.....\........A\|. ..8%/Qjx.....h.9...Z........\|...Qb.!P.....!7....!.X.f...:6.,...%.+].._..T..M"....x.........Zc.$......_......QVc..<N.J...4.I...@.T..2...K.S..J1...m.Y..2.......H...8Em...j)HK.11.J5....Ab.j..w.....l.!..PhT..v.}N.........`..\...-.s.......q.....(..i1...........5.EJ<8...<.\.k(L..C.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4208)
Category:	downloaded
Size (bytes):	235477
Entropy (8bit):	5.54886394709676
Encrypted:	false
SSDEEP:	3072:YQQaf5qZ3fhO+A+cS8pG1LceF2/ea8LR9Wk9As6UOQPGA2STnXDL9btIMxBtmWoh:LQX5NA9YLceF+o9TnXP9RIMRml
MD5:	AD2616D859DEF9E80E24C44CB2B21F8E
SHA1:	DF54C2B622EB5196CAD40C4CB65801CD69CBA6EB
SHA-256:	18F9039517E7C37B3CD4F77A0FE61991CAC080930FF4CFC4B17F909D47D80A9F
SHA-512:	586CC7F6DFA8C2F04BA1A90D0D2F861DEC07EB39C8460C10CF8AFB43FDBE694BAED45235B6444011FD82462C87BC9351024F1A3A7DBCE2905CECAEEC214B0FB3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-984344943&l=martechJsDataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-984344943","tag_id":10},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-984344943","tag_id":11},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-11223542053","tag_id":14},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-984344943","tag_id":9},{"function":"__ogt_conv_def","priority":1,"vtp_matchingRules":"[\"and\",[\"equals\",[\"variable\",\"pageLocation\",[\"map\",\"stripPr

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 534231
Category:	downloaded
Size (bytes):	159146
Entropy (8bit):	7.9983521451104025
Encrypted:	true
SSDEEP:	3072:HQNAYf8eRkyHVTPgvc3hlcy/6InV0li3VXNvfttIZ89ImGE:HUAB3cP6yey/pV0MZFq89Iu
MD5:	733F54C73EB7B676D4236B4B6ADB642B
SHA1:	72BCDF64BECF3E75D16F646C42D276E9FCABBFB3
SHA-256:	88A19B1E4D458EB05E4F15CE34DBFFCC3EF6403341DB314F9D3DF86B675E4984
SHA-512:	3B9EFC00E5F0A44B8A6612A10BA85E620666F95F88BE2443662204648F94A2C9EB0FF7D5167008D9591C8BBB12C29DA7ADA281DE248076F36CF8F9891EC6CCA2
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/site/main-customer-accounts-site.js?buildTime=1657307797
Preview:	...........{w.6.(....6'u..-'M....;..8..N.VVuh...H.JRq\K.....@....3...Z.......6.....d...8M\..\|...".YuU.F.f.M<q.~6.2Q,.d.....<...E.........x.d.4..b.L.i.V]..F.t......s.u.6...l!..9.c..g..&.QX..y.\..<.vvF.d.-.q1...B.G.l.c.....U..............Q...%.T.&...~92~.....H....:.......n../4z...B.O.7.p...$N.xk...........)...&.y.. .Jx~f7...u}.c.E?q;...C.I,@B.6.P>-..A...(....\6T..&Q<...i.6.-..A.!.=_.P..<a6=...\|..gEC...8~...8.A..7..~]...zn........O.~...E.4M?."l.0.W..Q......3.f....{{..=...:.'.....g"..V.....OO.,N.\.;NG..H.X..h9..h9........".j....a......n..h..........\|....u..$.\...n....".(..Y....a...{u.C..rt.e....0t6./..v.8........../o.PC.]O..2c!......i...-...==x{.......'.^>....7.}..3....&..<z.r...9....=89.<.}..W.3.~...I8FC/_.....WG.[..=.l....=5....g..]>.?.S\|9~2........o.?9]...?...\|>...y~..r.M......,..3...g<...... .[....$C...B....s..{..9.....x.O....y..iq=.....U9.....rL..9=....z...[z....z....,.....`.t..../p9.......q.s.X./...2A...k...W..S/....z#.>........%..

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/630646945?random=1714104722909&cv=11&fst=1714104722909&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78460
Entropy (8bit):	5.314133656692167
Encrypted:	false
SSDEEP:	1536:2u23v7YtctGCxcYOKlI5Ar4j4INh7XOvnM5/Q0x:W7YtctGf7XOvnMWq
MD5:	013124AE3169DE82174053E8CFD56E93
SHA1:	DD25DB1EE69E9BC5C219C1D60797849B8000AD8A
SHA-256:	BACAA702E7C6A65B00E73CA8D03F893655BB89A7E5F257378CB78223F5F6E317
SHA-512:	EB6869701E08AFAAC732C2DA6168A3E3F95A0EC75BBF12E68B732C0924C37BF75CB34049DEDC0683FF6CB7C80793EB082253BC860903BF41BCD90FC5D259F83E
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/14e503e7ed5f221c.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))},n=this&&this.__extends\|\|(M=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(t,e){t.__proto__=e}:function(t,e){for(var i in e)e.hasOwnProperty(i)&&(t[i]=e[i])}),function(t,e){M(t,e);function i(){this.constructor=t}t.prototype=null===e?Object.create(e):(i.prototype=e.prototype,new i)}),e=this&&this.__awaiter\|\|function(r,a,s,l){return new(s=s\|\|C)(function(t,e){function i(t){try{o(l.next(t))}catch(t){e(t)}}function n(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.value):new s(function(t){t(e.value)}).then(i,n)}o((l=l.apply(r,a\|\|[])).next())})},l=this&&this.__generator\|\|function(n,o){var r,a,s,l={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]},t={next:e(0

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 53278
Category:	downloaded
Size (bytes):	8049
Entropy (8bit):	7.977849067572323
Encrypted:	false
SSDEEP:	192:Y8l8Lnr2vqPArQvXgUhcjzatK4Ia9FyQ4cc2VmFAgjSajK5/5:LqTr2vP4pC4yQRmFxm8K/
MD5:	0E7343BEC97C098C43EAACEA0F0B2793
SHA1:	18BCBA3E7A9FD3A9683C07F5DD5C5055F5AF8F6A
SHA-256:	3410A97306A558E9AF77ED3EF568D9C5E01E44B7FA9F4721BF54EF52F3841A65
SHA-512:	978EADA606891E51534E667CC05EA26E676212EF871ADE32F353372FF89C040B99B352003D12579897D7A475000FF8BFCCF2C5F304562B0316BD6556559EBC29
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/main_style.css?1644377169
Preview:	...........=k..Fr..+.[,v.".z.g43.&..8.. A\|..H..J..1K.2I..x...~....AI..]...gHvuuuuuu..X.G5.W...vF.....wM.....xth.x.X7..hUo^..nG.l...h...8l.^...Xw..T..t.Q.?.....h....h.0:..M...?....t..'w:F..~....i...G.y..Y.M.5m.....~X.........^.[..z.0.O..\|.v...t....b.em.#.j..^..bWV...w...r.n<..).:...YK...a.@g..E.X.\|j..~s?z3'...h]W5E..r...Q......+..CO..i...>......-oK_Rl.%...].c...0.u..4......p...D..@.J.M..........8...Tn..">......+..,..z......k.r......oBQ..4&...?......Zpa.......Q[W..@.......g..........%S.f.S..=k....x=..d7.....-..\..E..vb......E@'..&.9...}.s{.V....l.F3.....gk}Q.N......[o.j....:..n...6./&...u...&.\S.O'..#t.v..f...........6\..sM.{...ku. .I.P.......XlM...WV.G.....:Y#.t^Sd.eG6e1z....nvx..}....z..NS`.x.d....s.......W..%k&.2R..%:..t!=V.....l.....Xu%eC...6.3<\@.P.....CW...@.iJ..K..\..$....d.hK...-.PmHE..3y0eIW...).g...?f.~C^h...w;..Y?.t....yZ..c.wr{%Y.r..k.....W..t....G.T9....KLzR..lTT...e........~.....j.xx..6a...qF..IU.!.\|....L.c.a_.P.P+.(..

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4778), with no line terminators
Category:	downloaded
Size (bytes):	4778
Entropy (8bit):	5.427364743677547
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwuLMpn02MGkdtH9JeXy1pecbt:9++2y7CpRuyfM39JKiwcbt
MD5:	A2A93A7555E1E5D3D59E9AC8D0F42647
SHA1:	24A9D3862F135F90A06F38AB85CB0F766BC5D432
SHA-256:	5E377A70F415B4E1896EBBD9504B4F045E38283DCA192996096410229479B905
SHA-512:	C898E0BE095B8E423D3E9AE4A6A687158064ABE2B6B8A0A114DF92AC5AEE7A4FC649475A1CD197D27906ED9CA55CD756D3121C84F3B7E70A4954A05D2A5F532D
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	13127
Entropy (8bit):	7.953153532424953
Encrypted:	false
SSDEEP:	192:xCheZvOZn+BbqkfHMMi87PQ0/7qwqqKbSrnSZz0u9x9EeOgLRYm/F3iZ9WLiULh1:8UGkFNHMvoQ9bAS0I0eOgZyZ9WLOWh
MD5:	16C984A1042FC08DB2463BB4CB2BC5B5
SHA1:	6B321192D173C46C40B147A2BF40499D8CF9D0D8
SHA-256:	5F4344D00D022AC7600DDBF53383887B3341FD73A8C61A01C02587CC94799A3B
SHA-512:	B51E0B9F55C4BAD4BCC0FBE7CE5DE11AFDEDCED7861549201AE11646508CFE7E5C5B4C0916A14C0E930A7F4575605238F6E46A542C8FBA7FEA30577AB33FBF26
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE................................................y~..........puz..........................................Tnzo..$.DQ.i...Z]a...{..NRVx....8=.Z...4.S.@....2TIDATx....:.6.`2.X.r.Ns}..qG2.....w..G;.^U@aY~.,KJM......e:~..]SWK....S.RpL..w}&i.DC......=..h..f;...HU.....'?.";..j.F`G.......G..#M>.?z....}>W.F0*...>="j..4.......x=..Z.;#.2.j....6\|.w.....0...q....t:).a8..c.v..5....U_.....[.R\X...8.I....z..r....2.....r;..1...v...V..^..ik;0I..ck.....2.r.......f.....<Ow.U.;l.....j&.t.]].; ....Q..'..r..>.....X..$.'.,.S.O.]Q......R.qIh.v.....?.&....g.a.0.5+...D........PU......(...E...:..o..;. .....E,....e.........'v.X..4?..+.F.........L.@.i..&...v.f....%...b..r.....0$.N.7.G.8.0....%.R. .....(.4B...I.y.....S.%...]uU......9...n.&..d...O.!.....?...)..P~)...$GiPz...TM.N@..ax(.].m..^S.{..7..TBy....MA.2...uP.\.~w...&.Q.c.hC.o.%e.f.<v....n..@.oy.,\|/T.<Q.....V.n...."..}.zj.OD....".v.n....I...>.....v.`1....iU9j

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54243)
Category:	downloaded
Size (bytes):	275706
Entropy (8bit):	5.395066350838152
Encrypted:	false
SSDEEP:	6144:R749uglhdDeIIatW/8Y8bjq7+sJXUIjHKbN0UCeZYj8ltS:Zgl/KJ0YapsJkhGU0
MD5:	CA45B692D4EA01B8E22CE609DA64B59E
SHA1:	A3F36C561663295DA3D46FBE96A37D44F9F77213
SHA-256:	9A4336B315B59D95BC9EFC365BC3E5010E91A59493925350CB8C4F4B6F5E74EA
SHA-512:	18DB05E8003EE04884FCAA748F7081A780BB79234DF2947AF8A98907EFCC0877263D3FDA2A55F9EC8589762D8A58B75AEDFF9854606A0720AE7A2E931EC78ADF
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/816297701715444?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 217x249, components 3
Category:	dropped
Size (bytes):	9280
Entropy (8bit):	7.955032045514248
Encrypted:	false
SSDEEP:	192:JyRSLQJT8YM/FSyf6dnqrpRd1lx/jdcgcMUeraNu0:YRXxLM/4PqR1XdyMUuaNu0
MD5:	28973745F066D278E135604F391F61E5
SHA1:	1B924E140117DC050A8EA401EF04EE8A64A64DB1
SHA-256:	9FA900381B14CE0AED259BD0AD54706DF6FB65BBFD0CC134F3268F87CBFF6DF8
SHA-512:	C9F08086B59CB67D3A3DA574E725DAE968935F2E631C15CDDBFF06767F44B67A419451C42BCC6A4C8D59BDCBA7B5CBFA2D3291E22273113D07F1F943A8250A78
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................E.........................!1.AQ."aq...2..5Br...#$%3R..4S.Cbs...6Tc.................................%.......................!1.A.Q."2Ra.............?..d..:(...rx..A_.....i.l.b..l/..}..b..j?.O.J.E./.....n#.&p.Z..M^[rY.......%;-.X.sX.......;5.].6..m.S.n.VW.XA(Lu..R.K6[Z.....\|.....C...5.K.,..N..&.!...........\....h....<.p[....#[48.Z..<.Rj....F....{{ ...!#.(T.y..o.Sf{d..').t.y.0....6...g..(uYaii.#M.;GP..-o%...>.t..+I......FZ^3..+.}..e.+h..He.c...e.q.+i.......L%.Q.{%....kA,Jh_^..w.......r...6..A#6n.Y.x....h.....^.M...6^........'!..v.t.!....%..k...C.,...].@.J......EW%m...+T.3F.6U.F#.FS....5.E ..@.w....+..z....o.?..Z..$........Z...7..L..5..26v..VO.U..U_......U.....`.4...h..]..-....qu.X.."......8..l....s.D.Z2q......#K.....<(E....'.G7...#....\|t.e....C{.....P..

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4260)
Category:	downloaded
Size (bytes):	787305
Entropy (8bit):	5.5891367027572665
Encrypted:	false
SSDEEP:	6144:TeIWi85//kXs7nMjnV5W9St/RTDT5Q2iCHv7Tp5LPGMZ1p/qe:0sVYyt7ce
MD5:	A1FB01010C952B8C2AEDE2327AF8242A
SHA1:	79D114EF30955DD7420173DEA45022A4C96DD664
SHA-256:	3731EFE5312CAF2A3742746A7C532AE3DF087202E5FD5B0F71F545F366F8C811
SHA-512:	75A98A3754776B75CFA89CBC5AE1DE2EB7A75BE08CC76F0F6705270F62CEC4C8B116BE083F60D71AC0D1AFAF7BA0C5BD1D86571CE7B9CCB22951661EF145CBBD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iOSK4/yk/l/en_US/fEweerzOoLdN1tHVL5OZK-DYvatkvPhoO1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:null}];return{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometLogInHiddenInputs_data",selections:[{alias:null,args:null,kind:"ScalarField",name:"prefill_contactpoint",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"prefill_source",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"idd_user_crypted_uid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"locale",storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"lsd",plural:!1,selections:a,storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"jazoest",plural:!1,selections:a,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"login_source

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?_=1714104705011
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	54542
Entropy (8bit):	5.316616974798103
Encrypted:	false
SSDEEP:	768:y+jT6cQxwM3Yo3osRBQkJzJ6hIXYIhNkNtKl:T6cKwMIK9
MD5:	89AA81A4CB87C5FEA11EE5D7DBC21ADB
SHA1:	766F60B7CEE246C1EDA99F7792F15D8053775F00
SHA-256:	CC1A50B00895277127B53B730C70111D78D38F2A81FC3F19F2710CBF83C4820C
SHA-512:	278DD11F01945151B5A27E0E4A8E0471C0DD7CB79406E68107C28A974B4ED0EB77BA9BBAB45278457F42C5F1AAA0E5842E9D75DAEFC01EAED9A1AF2141BFC4C1
Malicious:	false
Reputation:	low
Preview:	{"accountId": "8447815042", "projectId": "16952400626", "revision": "6268", "attributes": [{"id": "17416863509", "key": "device"}, {"id": "17430031856", "key": "Test"}, {"id": "17593460738", "key": "environment"}, {"id": "17891951313", "key": "hasInvoices"}, {"id": "17945340436", "key": "routeName"}, {"id": "18165210497", "key": "countryCode"}, {"id": "20110833614", "key": "signupAppName"}, {"id": "20441875299", "key": "itemsOrReports"}, {"id": "20871681854", "key": "request_target_token"}, {"id": "20876861005", "key": "locale"}, {"id": "20885810481", "key": "unitToken"}, {"id": "20898770097", "key": "requestTargetType"}, {"id": "20904131342", "key": "activeRequestId"}, {"id": "20907490018", "key": "hasPlaidFields"}, {"id": "20913900298", "key": "requestType"}, {"id": "20917850830", "key": "activeRequestsId"}, {"id": "21278211989", "key": "isRetailFreeTrial"}, {"id": "21304040408", "key": "isSubscribedToRetail"}, {"id": "21305002600", "key": "belowItemCountThreshold"}, {"id": "21317371

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41088)
Category:	downloaded
Size (bytes):	420555
Entropy (8bit):	5.467143697212412
Encrypted:	false
SSDEEP:	6144:hmlgLClwZJ1Ys72eBJMv+DPDAxAeWtklnxKZ:kOLCWbRJMvMeYMKZ
MD5:	753C988975847C876E10BD7C3D627457
SHA1:	66A8ACE637E63A9EB9A0129DA58F2668C1B5F8C3
SHA-256:	A54234F412B9BFDC07FCBD75A6E3E22C0F89F89F861EA0E6E6A96C7048834C41
SHA-512:	69BC8C3592652FF3F1C6915A2317AFAF05365298FE2629566C2998E0A573B21752FAC56C6280C2B5401E14F451915013C0A88977F26B290BB2CBC1EC7E6FF37E
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTIyYzc3NzllMA.js
Preview:	!function(e){var r={};function o(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=r,o.d=function(t,n,e){o.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(n,t){if(1&t&&(n=o(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(o.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var r in n)o.d(e,r,function(t){return n[t]}.bind(null,r));return e},o.n=function(t){var n=t&&t.__esModule?function(){return t["default"]}:function(){return t};return o.d(n,"a",n),n},o.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},o.p="https://analytics.tiktok.com/i18n/pixel/",o(o.s="ranp")}({"/6w+":function(t,n,e){"use strict";var

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65509)
Category:	downloaded
Size (bytes):	81941
Entropy (8bit):	5.385237226387715
Encrypted:	false
SSDEEP:	1536:TWT2BXg8+c8eBnW0FK+dZFAtKqbO3aAYEmmcn9Z1gKBiMu6R3WP/w:TWT25Qgwygt1bWVmDZ1ZBFRGPY
MD5:	A285DB84C92E8C8A64D51ED4D5AA25DE
SHA1:	BCEF7955AE5360C436218BD4FC75D5FD32D3A83D
SHA-256:	6341332213BD5444AC478635B3BC717F1129DFDFE0D0C1A4E8551AD834C339B4
SHA-512:	C44749091C842EA76C4B48FA82F4DDBC2BA8FFC0F0D341EEBC7ED9DAF1BEF9FA08252FEE1506A3D6552064C8BF87AC01F7678D06D385B1B10EAF75F0B1101822
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/unip/1543392/tfa.js
Preview:	/! 20240421-4-RELEASE /..function _typeof(e){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}!function(e){var t='TFASC';t.indexOf("{jsScope}")>-1&&(t="TRC"),e[t]\|\|(e[t]={})}(window),function(e,t){e.TRC=e.TRC\|\|{};var n=function e(){return!0},r=function n(r,i,o,a){var s=r+"/"+encodeURIComponent(o\|\|e.TRC.publisherId)+"/log/3"+"/"+i;return a&&(s+="?"+t.TRCLogger.formatParams(a)),s},i=function t(r,i,a,s){var c,u=new(e.XDomainRequest\|\|e.XMLHttpRequest);return u.open(r,i),u.onload="function"==typeof s?s:n,u.onerror=n,u.ontimeout=n,u.onprogress=n,u.withCredentials=!0,a&&o(u,a),u},o=function e(t,n){for(var r in n)n.hasOwnProperty(r)&&t.setRequestHeader(r,n[r])};e.TRC.TRCLogger=t.TRCLogger={post:function n(o,a,s,c,u,l){var f=r(o,a,c,u),d=i("POST",f);l&&"function"==typeof e.navigator.sendBeacon?e.na

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2465), with no line terminators
Category:	downloaded
Size (bytes):	2465
Entropy (8bit):	5.956324081796051
Encrypted:	false
SSDEEP:	48:NOB9Yc0Ck3HeoP/2R9Ks3WLaRP3pMpmcwV2RQf+33BH33BJkcW5Hca2q:YQ12PKs3WLC5M9VDADV
MD5:	F8898404CD6F78BDC9B919D2DBCEDE43
SHA1:	01064FAAB48C4CFB05B439BCC680A1247FC11247
SHA-256:	A2C466AFA05FB2D42160C9132F7BFF2C6FFC3A3F4076CC193D93072FA27B1800
SHA-512:	2466C581A471DA7853FE617D79B5F54EF3DD38F5C5F244064077551D1166C3A5847610046396A7812DD7F050F82F2A32EB8BFC74377340E29F146C65D6071564
Malicious:	false
Reputation:	low
URL:	https://9628652.fls.doubleclick.net/activityi;dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1"/><img src="https://ad.doubleclick.net/ddm/ac

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.316038158582891
Encrypted:	false
SSDEEP:	12:xPTsMfiIXkXjP3tiWRG7vZ7I9v0hXjP3tiWRG7vZzLZHXKK3tiWRG7vHIQb:xoVIXkXjl567OvWXjl56zxXd5a
MD5:	07BD2231ACA673D2BE4B07606E624471
SHA1:	0BDF7238DBE9108E22A07FB7401712848487D276
SHA-256:	52CAFF3F8FBCE97EFCD5CE330F1B6E770DF840A047ED3804B51A3CE69E54F184
SHA-512:	CE04A4C2FE8A6289159D255C35F4FDB576CE2C6142B55B24E088424FC1EEB9BF436397F6FCD7685487777DF990120695C8717500FCB0F3A0D18E3316BD7D3802
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=1d7ba62e-f45b-48b1-a4b3-b753132c722f&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=0, orientation=upper-left, width=0], baseline, precision 8, 1100x777, components 3
Category:	dropped
Size (bytes):	107393
Entropy (8bit):	7.979290648706653
Encrypted:	false
SSDEEP:	1536:sQjLYaMQ/UV2tePeYk4LJNRkhZBiKI/f6gbWTAxry8d2hXYQ88RqMA2Jlsas3vA:sQnteGYbLJNRkhXk/f/a0xr/2diylwvA
MD5:	2453F8EC1EAFCC298B1380B732CE7CC7
SHA1:	DEAE3FF46A54444E7F73E252315764C1B00A9969
SHA-256:	DB2766550EECE9913775B21CE4F796D0AC6BBF748AA5449FE126CF6E8066F67F
SHA-512:	F4B503A03700BE099D037D4530008628031215143B4528932ED182212E36E0338BEC3C3B59263BBFB3165BFF32E3F07AF7BFD3ECDF62144F695576B085FBC8A2
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*..............................i.........>.............................\................2021:09:11 09:20:06.......................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........L.."........................................V........................!1.AQ.."aq2.....#B...3Rr..$b...%4Cs...5Sc...&6DTdt'7u....E.........................

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	downloaded
Size (bytes):	63882
Entropy (8bit):	7.965923658280066
Encrypted:	false
SSDEEP:	1536:gTm6wvWCNrjxnAiwRyeLZRCaK57JHWt/smcTYaWG8k7bZ:gTQJVnleBZ857JHA/haIkHZ
MD5:	CD1007EA2A611E50F0B6BAB39B7D8B41
SHA1:	2173EDC3C23A40025D31CDF917BDAE9C4FEC2139
SHA-256:	B647ED1FFFEC93B834EF7AAC865AD15B3FADA635F58FEC743DAF6CBE0F95B776
SHA-512:	86CF0F973163F9CCB0AAEA287578F9AE0B26766C5648F1EDF1235677E2222BAA13B40C8519B23768017986447AD2780BE4371CC29DA2ACA1291366C1C899F6C8
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............6...................................................................S.........................................................+d.....l...D.4..k...H.,..@.+.b`...5........1.'..b\.8/.T... %.W<..y..I...dX..X .I<..=$...1.`7.j&........L.n....W.I>J.xM..x..I..Z.....o,'....

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	downloaded
Size (bytes):	29880
Entropy (8bit):	7.850525600479244
Encrypted:	false
SSDEEP:	384:/peE62Qz8jYGDrUM9NFmuFuhTYFpZayH1wMaLp251+MzZx0ZcTjqvf3JZ1ck2ZhP:/cDzyDoMHFJHSFAwsmAEckEhP
MD5:	B36BE0D65067FF41CAC79A6A57BEBE40
SHA1:	85A3A7CA04B8B46FEEE395E1F3833E72E6DA59BB
SHA-256:	8693B7CE5EDBB74E61224678849BE8C321E2C601FD04F207F2F21A1D3900A77F
SHA-512:	936987F431E3B1C49FA35AF0C4BD513784039257405334B56D5E506C4C9687769218CFB6D3840831519B5EF95ADB575A63290CEEF71C5513D73ABFDD44A9912A
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-three-page-3.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............6......................................................................................................................................................................5.6L.M.1t...................k..xZ.r]..................tv,...`^........N.c...........84.-....I.....-.\.

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19987)
Category:	downloaded
Size (bytes):	1548318
Entropy (8bit):	5.4654270107602825
Encrypted:	false
SSDEEP:	12288:om3yMWdqe1DjbYn5QVyiOS1y6oxeM2Wo+Mp9Pae:om3ygDn5QVyi99uU+Mpge
MD5:	E7A7D018E7C647257046E67469EE6DEC
SHA1:	291521C6B8ACBDAF0A9686373DCE3B1E755AED36
SHA-256:	B1091BB7867D3ECF9F9F308B3534C6EC2DA04941B57C2334270C78855623BAA3
SHA-512:	119508BEA9650C4A45FF749C9B0DBA9A3FB5EADFB55C1E9E42B77D4662D20BEDEC5510AF8074839FA68A7DDF65EA0EA7B3C03D06DD99493A1B21B30EB8999DEE
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ijuz4/yH/l/en_US/14GmiBZnqb0.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rgba(0, 0, 0, 0.2)","fds-black-alpha-30":"rgba(0, 0, 0, 0.3)","fds-black-alpha-40":"rgba(0, 0, 0, 0.4)","fds-black-alpha-50":"rgba(0, 0, 0, 0.5)","fds-black-alpha-60":"rgba(0, 0, 0, 0.6)","fds-black-alpha-80":"rgba(0, 0, 0, 0.8)","fds-blue-05":"black","fds-blue-30":"black","fds-blue-40":"black","fds-blue-60":"black","fds-blue-70":"black","fds-blue-80":"black","fds-button-text":"black","fds-comment-background":"black","fds-dark-mode-gray-35":"black","fds-dark-mode-gray-50":"black","fds-dark-mode-gray-70":"black","fds-dark-mode-gray-80":"black","fds-dark-mode-gray-90":"black","fds-dark-mode-gray-100":"black","fds-gray-00":"black","fds-gray-05":"black","fds-gray-10":"black","fds-gray-20":"black","fds-gray-25":"black","fds-gray-30":"black","

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6003
Entropy (8bit):	4.914016164219438
Encrypted:	false
SSDEEP:	96:OpyIVC40wiJrgZCau+NpuBHxYa6Ay9ddmLxf6Xxe9jT+pjN9V3jJjeW1h4kF:QVluUZ9xNp46v9ddmLN6iWxJZiC
MD5:	C21EE5891BAA2F541972F0DCEE032CBC
SHA1:	B107AEC8AC54E6ABE58425273E366F93333E39C8
SHA-256:	2972458E0915ECD5F31DFDAD09C2F90F67D35076843FB98633660256ACC694FB
SHA-512:	8DD0772F3B043809C8A97556EC05301AF81188880BD6B9B5A9B9D51CCDA05957411E9E32D1151CE801D6FF7E8F3545A5863F81D6DB55060A71C418F2931B315F
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202301.2.0","OptanonDataJSON":"c4657020-c7d1-4a14-a091-267a7ee4863e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"8106461e-d91d-4359-ae6f-1fc360972fe2","Name":"EU, IE, Quebec","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","hu","se","mc","si","sk","mf","sm","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","ax","cz","pl","li","ro","nl"],"States":{"ca":["qc"]},"LanguageSwitcherPlaceholder":{"de":"de","en-IE":"en-IE","sv":"sv","ru":"ru","en-US":"en-US","pt":"pt","it":"it","fr":"fr","es":"es","fr-CA":"fr-CA","zh":"zh","default":"en","ja":"ja","es-US":"es-US","pl":"pl","da":"da","tr":"tr","en-GB":"e

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9737692
Category:	downloaded
Size (bytes):	1848609
Entropy (8bit):	7.999599265109491
Encrypted:	true
SSDEEP:	49152:TWKJRUqqWArUOc6ni2R7gH1sCKLnAAuusC7omMVEr8Tm5plBPJu0lZ:TTeqq7U8i2ZxCKLnA6hzrPPJuKZ
MD5:	74ECC435427FDB64437AB27E296F62E7
SHA1:	95A348C03826ABDB4EC1A20B481545D858126E28
SHA-256:	9B482A6DD8CBC1028608B042BB8771DFD77902BB8EBD524031FB58D58DE47BF8
SHA-512:	71C56DFD7572FFE6EA7145DEFEDDBE917CD9F54D86BD925E2693BAC742F62080DD5DC9D060473B1CBFCA0EF64003F7ABAE8B51DB9DDB344A67D074329517A483
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/vendor.js
Preview:	.............z.6.(....%#H......F_..m..$..Y..%XfC.I.q-...<.y..].. )'3{.?_k......:......B..~.{t...U.g..Up{.....8.....G...........n....^.~....Oo....../..~\|z....W....o.".Vao,....8......O..>......_<>}v...x....<....?.8=...........7....-...o?={.....O.}....{#Q..............?y.......x........2..,.2...<^.B,.e.IQ.?.I!_..mj.....d.dq.m._.X.Y%?T.u..9I..zfa^..Q.....^]....pQH..?.i`fyx~.......Le%.{.zt...N.]}.;G..F.....\F.r..q)x...\......U.....yT.S.....x.?.F.\|0..Y>......J.......f..%...'yv.&.4.W<...&..A..^....u.odQ..yp\|\t=....!.,.G...yT..`/..;.T^..zF.A.!....."..F..m.3R]...Q&.....t...mVn7X.\........l).`.....?......B.....WV2^...<.O./......j..YU.U...?...$.f.Z.OxjB.+..u.K....9v>)..m...~_..\K...E=..8.\|5M.Kp..j...._,.4.....a5xR...S.......$...o..\&.:....(.._..p.....y....la..w)/..I.\|..A8...v......`....Lwk.`..]R1..J..v;.....I.M.GY^..z...K....\....V.........P....g..^":J..K......./...f[^.Y..[.........r.....?....&.`...&M.;.xw...v..Gb0..2.q..d.=.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1257
Entropy (8bit):	6.674703615014842
Encrypted:	false
SSDEEP:	24:Ci1he91Wwjx82lY2T3o5Vhb4VY/4Vb2yJ3Vx34Vh7kQ4V/G0PG8MPR7XUW1N:CgqQNn2qrojBJ3bsWN/RDMWY
MD5:	E8E61D02C59CA3F3CC4ECBF78491CC8F
SHA1:	3DB15331AAAA18CF68DCDFC2A41A569AA4644F5C
SHA-256:	695F86E322E77356CDC369934228828DDC66FCD307AB442478CD01F0E2CA2A2A
SHA-512:	155F2EBD59BF529A41312B274BFEB8FF6201B45E1E09E5F7BC3DAE0B597AE30165E4DA658B9FD7F391F4CB1CA6179CC9D4A27D9E583C79912312CAA4A509525F
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/checkbox.png?1644377169
Preview:	.PNG........IHDR...B.........9.......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:1EE4ECE2FA5211E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:1EE4ECE3FA5211E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:258E7E63FA2011E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:258E7E64FA2011E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...(...[IDATx.b...?..g.3P.0Bi..............8........3R.\....ccc....XZ;...a.0.%E...F..q5...q!...;...H...%@....

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/746791505?random=1714104722873&cv=11&fst=1714104722873&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html></html>

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?
Preview:	<html></html>

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22936), with no line terminators
Category:	downloaded
Size (bytes):	22936
Entropy (8bit):	5.592411329057004
Encrypted:	false
SSDEEP:	384:y4Yg+cMnuErh87Ce/gk/Ry5dbJZdb9+W/9FOGXEPYxWYUngfGMKuVrE8GCemgl/f:suca7P4YMrJL9LVYqpEenlLGPx5lQJkb
MD5:	5D424748A07B26DC9FF5E8D88E825076
SHA1:	BB4BB62826EA08B6E1BC0A66337CA97F59371156
SHA-256:	17F822D6131A164C5462AB447C369F6BC41777B6A41283006C67C8E8F422C924
SHA-512:	34625043B4E150D12E2F9D41A92FC549701C176E70E237A2E784A68A7EE0A387EE6C0796D1FC91A09FC735BE01B56B4254A6EA85F3DA579FF0B0E06580029463
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/984344943?random=1714104722667&cv=11&fst=1714104722667&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j468327996","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j468327996\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sPRFruA!2sZxh3lA!3sAAptDV5r7LaG"],"userBiddingSignals":[["1278457","455615919","481831569"],null,1714104724493114],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161731983564\u0026cr_id=694222103922\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGH

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 97, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9677
Entropy (8bit):	7.970815897911816
Encrypted:	false
SSDEEP:	192:GVd97ZFfQoDBbxIkFUD/QCEVlcTE85PlcBz6nH89KCCotHkXKp67mkz:KH7ZZDBbKYFHQcFca+x7Pz
MD5:	6E0F7AD31BF187E0D88FC5787573BA71
SHA1:	14E8B85CC32A01C8901E4AC0160582D29A45E9E6
SHA-256:	580EF6409E067A4EC4A427400C7D6216184869E2DA53343DF20753CC1F8A46CD
SHA-512:	A7078CAC9A5319904CB47E01A426EAE30A26D4AF5094438F41360396C280473B9C69748B7E7A603232DA9B6D0F7297FEFB04C434EB8098CC6F89F7183C44AB52
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/images/site/footer/footer-toast-published-image-1.png
Preview:	.PNG........IHDR.......a.....U.E.....PLTE................................."""..................$$$...&&&.......................................(((.....................................................................999...........}}}......222///......EEE.....Z6)...ooo.................ZZZ..........{.y[**......R<....................................mU3&....................IJIK+............sF3....Q0#............xrqr.o}M8........ttt^;.............tV.jLBBB.Z@,,,.~`OOO==<mB0..........s.}s666e=-B%....mN.fJxJ6..h..d.pd.qUSST..~aA4444......z.gX.VB.............xogffbbdXWWzcV??>............u^^^.......tfs\PrVG.aEkNA&..........U<K5+8..0.............~.k];;;.......lll.mX........{k_.^LS=3HI1!.(..........yxx][:D-$..............miA...xjrcZeI;5:......:( ~vL.......i.sh..].......j.........".IDATx..ml.q..uw......\......N...,-....(..[_0}AR...1..QZ.m:...TB......!C:.)...../....v5.o}.._....?....k'..?....s..e...&'.....(..#.$....(..x.i.X!..g....5<D\.lp..0.a.5...z.....t.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	214419
Entropy (8bit):	5.531389350613581
Encrypted:	false
SSDEEP:	3072:LUQaf5qZ3fhO+Anc/8IG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMPHuL:IQX5NAWYLceF+v9TnXP9RIMPY
MD5:	67E84BD83EEECA17AAC64FA7CEB7580B
SHA1:	790FC4B9D5C9947B8CC46BC2313AAAD3BABA9E9C
SHA-256:	5EA2356749662D18DF491EFCD89172FDD56C2217468760B69B0D9305D515D67A
SHA-512:	F013BAEBB4B9D586D8F1D3878E461DCF636107088CA655374004E030BD2ECE1B6F68336F4C920129E1E31BF85EB1A4BD13E839771AB3A516C77DF29510DDF599
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-746791505&l=martechJsDataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1371420&time=1714104722231&url=https%3A%2F%2Fsquareup.com%2F
Preview:	{}

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	downloaded
Size (bytes):	31391
Entropy (8bit):	7.857202289298064
Encrypted:	false
SSDEEP:	768:ZXI3YywIDM+UgpPF5CX6UrakVc9Ie5J/XDUhUn7p:ZXIoyTAbiCqUrakK9nUhU1
MD5:	D63B71343E0AEB3B727F0CC7D5C3A2D8
SHA1:	A681268178A23498CA0948F08EFC382B15AF732A
SHA-256:	0D0E08A986B9B27B58FA1749DA4576D1580A63FD981A700D29551EC10CA52E1B
SHA-512:	6AEEFDCA074942EFDAEA4460D97F4A5A7AF85BC5594D707F189503DD30AD354B7B7C04D2C98B73A4EDB8E6FBDB3F82CDE38D2769CD473AEF82136EF13365804D
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/yoga-part-two-page-2.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............7.......................................................................................................................................................................Q.T.7y\|..................K._.f.;....................G..'b ..c...v..N. ..........py..2#.).....X.#.25.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	199516
Entropy (8bit):	5.527707304404612
Encrypted:	false
SSDEEP:	3072:LUQaf5qZ3fhO+A7cE8oG1LceF2/ea8LR9Wk9ARCzOQjSTnXDL9btIMPJuL:IQX5NADYLceF+scTnXP9RIMRY
MD5:	B5AF445FB2D3B67FE1F03B0BA7B0C2DF
SHA1:	EBDD7386D9DDE88745D8BEBB00C34E7425DCEA46
SHA-256:	BFA8E54C8F666740CCDE1C8B1CBE8E1FCE7CF2B65F4D3A3B74576C90899EFE27
SHA-512:	65B41BF6B6447849BC2487F3A11C32F086FC76176E490B707D6B4A188E71BE6F906FB85C093988C2718A71C5D370A4141F105742764D9DBC3ECD4C6F39E38160
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-12345&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3
Category:	dropped
Size (bytes):	10187
Entropy (8bit):	7.9178709594981544
Encrypted:	false
SSDEEP:	192:HdUfZK6ruWFqBt5T0IeZdW1oMC5njiJ0kxdsMz3yXF+:HmZK5KqBb1K41W5jiJ0Osc8U
MD5:	135E61A61184CB0CECA5447677B64D5A
SHA1:	7BFCA7AB14C7BE8688729FE5C76D01C15DCCC0FC
SHA-256:	86CC78E492048DABF9309AF79C2504CA65DC7DD5D071259060517AE4BD494DE8
SHA-512:	7E9111002C5D2FD366761BA7DC229A596D8C45954B1E0CB07A55999E737B20B84903A47FFF7221572576DE55766C47EDFFBF77BFEBC1F3FBF43FCFA3E57F870E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................A............................!.1."AQ.aq..2...#...$BCRb...4.D.....................................3.......................!1AQ.aq......."2...R#..B..............?...@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(...N......P..@(......P..@(......P..@(........Z.\.Oo.yj...h.........H.%(.q.y:....i...>(.M..E..d......[.2.uA'.R...()E+V.?_..Q.........<....z_..-bQx.......g.[....d./._.XKNB.Oj.....`n.)MZm.Wn.....~......9.6._N..?:....7.Z.6...cW.]..T..1...N.'..$v.....V.m....t..I{....x...6.vMf..X..7v..e...R...Lf.o.XJ....n...Q..i.[^/p...K...u ....P..@(.....C.@(......P..@(.J..;.:.9....-.M...)R.....t$l......t+...KN.....a..)....!..,.~.."..d.V.w...Xil...!K..}T..+.ms.^#-:m_i.......K.....3.7...Q.6......Q......{...JN.}.\.*...%.5.I..:...m./'.s2.h..L

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	18364
Entropy (8bit):	7.948684921105334
Encrypted:	false
SSDEEP:	384:oL4n2qdtHG0W5R4q9mLb44dlvXUUoFznIwShzS0aT27cQpexhz:oL6dtm0u4ioJnvHoddeJU2gQgzz
MD5:	D1049597059131AD5B6549FA9832946C
SHA1:	E0FB35A4B0E9A57D3DBD8B311F5723093729C416
SHA-256:	77ADC1674DE39D25870AA7F0AF40DB0490CE977D1129AB4E37706BEEB275F33A
SHA-512:	E25B47D5C8CC66F4EB8766EC2922B9BF4A2AE68E626EC4AECA49AE0DB9E0CBAB54C0E378C3A1741A0B212093EE8812B1B6E922EFDB4B0A5542EA9557CED8CE5E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30306!3i18994!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=48903
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...................................................y~...........puz............................o.....NRV^.w.....$.D..WXZ....... !$..8./2efh..N.f..........=.Z...4.S.....=...F.IDATx....:...............vWI.$!.{..j.>.mc.-..eZ..8,v.u..~...M....4-."I.2...p....0...\|...<.w.S.z.,.`.n.........[.7<g.m.....M+...).rn......D..Px......ua...8..b..}7..\|....g.B ..y.9...j..q.l..[..e.....=.q<.g.~6.=...+....i..z......Eb++..n..Q.......2.'O..y.V........@..v...v:...u}yN:Im...-G.(..w[..C...K... ...X..m3...5W......{.K...s......_\|y^..a.....y..d6.L....g.....g...0f.nY...5.p..R.).4.....0H...}...#.vF.5>.\>.....]..tP.IY.1~K. .....A.G%.DZ~k. .a:]M..#...-K..f....LC01.......n,....0a....QZ..C~H.X}}....G....T.@\`..5.....k.'.x..!_...P....J..zT.P.=....X3.. N..J..U......A...B.~#b.C. .>.[.8.?..K;............g.O.t......u.+o;.m.....aA.-IL@../.>..........b...D.:...i. U.'...@ ...wc.a%......i:.BH...P@..]o.M..*.......

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	14141
Entropy (8bit):	7.964412649482339
Encrypted:	false
SSDEEP:	192:sdEG+IHQQO/ExoKcei7NmaXeAGW1UpKktozypwo+DzOEWDoylo4bEHnxIFruU9AC:syHJ/h5ei7cYytao+DiEv+EIrL9HPL7
MD5:	5FE641DBE0003D23811DE47ECC4F34E8
SHA1:	5E02318AF651EA59F445071FC5AE783A5148B3B7
SHA-256:	EFB4AACB655702229406D646230425A0AA39B6EF517ADB812A940B0394DAC9C8
SHA-512:	AC342E69A38F2FE3BDF546E46906AC16CA6708196D5B73471ADBD17F1D0F2D0668B0F939D217C891A198D547BCA5B68CE9D045F2C9B3ED34DAE7F228D088C309
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE...........................................................................~.............puz......Tnz...i......y~.t....._w..J@....c[.}v....=3..........0%.g..g\S.. !$.s.=.Zx........6,IDATx....z.H...p..Y.U..........CR...u...g7N$.&0..AQ.@.qb.F..T.[...\|...-6.PWV..tnX'.k.F..v.?...S.?4=g.q}.....pfi....9..A.w..:T..n....lQ..(..~.......`..OmU.....D.m...../..x.9.}-.tI.%'..h..~.....u<%.............r!...}...b+.Z2.o..&.a8Z.....e......Xc.......J415%g.l....F..LP...<PU#.....(..\|3.........1..N...\|.X.:...fg..`......3%o...'].A.qe.)...P6...R..r....;.m/7..y%I.O%.t..n....n.@0.L..:m.-2.6.....16...J.....m.8.......L.2.>.......6N!..vTue.G.@I..j.'.-....&.hk.O.....gg..0..6..^.w........+..{^s8;\|.6..&..q.%... ..6..)....hG.tM_e...?@..vz..N .W..=zi...1FQ.D.~....j..5Np........f.W.....D..z.\.@.....!..Q.q.w....p.....E....q......\|"X.4\........J..e.uY.1.%.4...RW.x.y.....8....B.cg..&.q..W..4.xxP.W.z.^.h...@..I.(...@

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 277, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	418549
Entropy (8bit):	7.9795855722462585
Encrypted:	false
SSDEEP:	12288:wun5mzGGvWP9vWZJmo9//RQDGlt6RVYQ3tm:Xn4HtxyyGRVYQ3tm
MD5:	64CCCE51A2CDFDF456B9E27FDEBE61A9
SHA1:	5A66A8FC5A9ECD6BF89F622ECA1ACBA09BC38370
SHA-256:	D0AC970277C573254A3D9E81E73E0C1385868BA193A29BCE56047CD737269E81
SHA-512:	D8AEBAB1AC66EC1451C0B6714DE7752ADD7A19BA756F2BCC85D82AEE1ED2E181FE8E6D4A26F3B696B90F5F1BAF50E95C7F561C65EAD5BD4B7777F3C77A6DC9A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s0......sBIT....\|.d.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe Fireworks CS5.1..H.....tEXtCreation Time.11/29/11...w...IIDATx^....[z.={....w..[.y.e.X...+.......HQ.....). ......C.eLa.p(c..c.e..dYC..{.N..3...{...~....s[..L....w..].z..z.k.\.b..j..j..j..........=u..O../......Za.._{..n...^.A......I......M...._..^...i(j...7~.\|...?./...<k..R..Nw....o]...\.....^....<.K.Y./..M1^.gB...GI.86&E..%.a.].....:.?M.....O....IyYF.?/.Am......n..WW..g.Z{....2..i,.3.Z...Q.\|.agx..Y.m..].....C.~..k..V.W.-3...wI.......o.-.....X.Q..F.....a..'1..c...g.$..F..F+..:y.......(.s.Mb:o.d.....w...F}..n?..>~.Q...j9.>.7}...E......G.T.:q.......,.+.ge.'1...h:!...A..~.8&..q:.Gw.........V.....Nc...b....d...f>..CTV...(d.3h....r....Wb@^...'.}4.;.y.4..Y.......... .Z<......4a\.A-........n{...l~.......1].....y...v.A.O..../..J...?...W.O-..,...K.k<.g....]> .S..............a.h..7y.r5.+.&..../\|...[....f...6...E?..\|Fr.{....e.....j

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7080
Entropy (8bit):	7.902930960331554
Encrypted:	false
SSDEEP:	192:mwjZzP5Lz92FJmRJ9xTfe6T8LZPf+n8EX4dlu:/j1P5d2FJmT9tBWpf+nh4w
MD5:	10B8EBCFA898C7E0B0DC77A20784B496
SHA1:	92EC6305DF9CEDCB69559659692E8FAD89FA0031
SHA-256:	0D412585363664DAD4192DC0967660709B253B04794941A8C62BD3EE85C84B3C
SHA-512:	63EFDF26BA21F88B2B6916476F278FE2DEB71A1CEEC84C0AF2F95760C620CC318580EE234C275732BCC798CB45EBF1642DB51071A33B72717EF2771FDC546F96
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs................oPLTE...............................puz...........y~.................{...Bx............Z.......!a.....Z.=.Z.s.c....IDATx..........L.:........&.(.P.-'.....H...!M$./........t..Z..0....P.w1.fs..A...........D...p.....br..\w=......fEv..n...8....+.R).,A.........(...J.>2.l+Ooo..3t8,....$..Ma..D..u9.[...!}t.+AT.U`:... ......].N./}5.../w...z.Z......!.......+..~...)..M....[..=....=..u.CpY]{,A....O......sg..`z..dl..Bp..V...2.w-...^....o.n.7...S:WRNb.u.........L"`.j.Z.@..>Z..o.Fo?q..<%...........n...%X\|.[..v......u_T:m[v.#.N.....@.a".I.V......ku.F....U.S?....^}J6.V.'!.RJKIA.Gh.V`...k.v...w.)...q...y..P....lV&9.....,......=..&%........w..;..{..m.d4.......ks.......P...A...F..6....E..$..J....OV..c@d ..zuYA~..(.=.@..#.....+&.R...!k..4..w....n.!H+.j.fG.TJk....@....[(d........F.`..Z..T`....,...@mR.....W........d.iB...KU......w.*@.g...8.......oM....[.E.PX......l.R...l..r\j.W..32@!V.[.R.....k..m2D..2...kDg.R!.Z

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 237 x 237, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	84346
Entropy (8bit):	7.988742534490167
Encrypted:	false
SSDEEP:	1536:+56PVAh2PHKym594nIAffiSVLiksvTKuugQGdKr/jfaHdiynvl4V871G8ArGB:K6Pqh2PH4594IAfpDsLKmKr/Gdzv1717
MD5:	402708EA4C7B568312B7516AFC6E850F
SHA1:	CD0C1F47451377005AA918328C2A84E2EE7D29FB
SHA-256:	25ACA3DC3D163C9D47B230F39DAE8C4219A50E7BFA348450B9992CADB0E90D9E
SHA-512:	660DAD006F44BC34C97D2BE660FF15DB98BEFCB5131CAA1C559C9C89F116BF9DE99605116A07B2493DE61995E89FB095BAE64C2A7CC6672E5689904C6F0FAC3C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............../e...IAIDATx...w.g..?g..sv......'.M...Q.$@.,..3..9.Z..Z.s....U].]..%...{.e+.#}..g..=........r.}o.....k........-..Xc...+/~X#.5.....>...:..7..w7}`....\|yB.x... .7.....g.G8.yI~....'..........[y.........Z......wC.e]..;{,..."...<~).WV..%...n.8...M......F.....[..%..!. .Kp\|..../....5...D.-_..WY...D.._......\|.Z.6...=~.K.z...u...2..-Y..AP5,$........NEQ................{.Zy.o....\..1\.......o.ky.5.,q..O..VV"$!.....!C.2....Y..a:$!J..[.y........oS<^..fa7#J.D..X (.A........e......5............&.G..?..,Ko...8.....?l..{....#y..n..@.Nh.2$r.<..x..r. ..Y.........Ra.<G..&(..<#.. .@.p.!rs..{....n..,..;.....(......x......./.f..$.C............/...~.....Q..@..."...=.;.?..y....~7.....2...i^.8> ...d..u.En5....h.........[UZ.&...7..@c6..AX.xc#6.}....O.fyu.C.t.$.m$l0.p.....{8...h..s[.........a.....p....P}0..Y..HA.8..xJ.i.gW.y....%.58.....z._.u...Y.xs....o_......=f...a.. ......p........s.I..p.=..fW.mKn.<f.....n..;.r...a...t....e%...2~H<.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	6.924211392519131
Encrypted:	false
SSDEEP:	6:NXMfQEYEZHt7KfbfLVjeUdhfHyYEUhQAF6yRsak7m2kE:KiE5tmTjViOfHyYE4QEsakaS
MD5:	974A8EA2A8B86C3D99CFEF5DD1E28827
SHA1:	B6217466F6BB598B26B39B60F661D87AF7C6AE94
SHA-256:	7082D702280AEB204B77E214ABE9B35251155664449F8683C0290D9D71DCE05A
SHA-512:	E4D30EC915310ADDCC0F80B894110167A828F0163E653BD59FC6E5956337FE12672F9A40890D6FDCDB5FA6BB4514B3ED5F7764E544C4037EFBC882BC7631AC61
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/images/old/bg_feed.gif
Preview:	GIF89a.............^...j)......0..}..J.$.w.......5..y..H............-....Y.....F....>.........!.......,........... ..Ec6V:.".\^%I...S7...d..ph.(<....P.I..2......4Yl$.."..R...S@x .+.C..&..U.y\#)vx.VW..W..]..)..e..e..........W.......:z......W..+......W....+.+...........t...."...."!.;

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7080
Entropy (8bit):	7.902930960331554
Encrypted:	false
SSDEEP:	192:mwjZzP5Lz92FJmRJ9xTfe6T8LZPf+n8EX4dlu:/j1P5d2FJmT9tBWpf+nh4w
MD5:	10B8EBCFA898C7E0B0DC77A20784B496
SHA1:	92EC6305DF9CEDCB69559659692E8FAD89FA0031
SHA-256:	0D412585363664DAD4192DC0967660709B253B04794941A8C62BD3EE85C84B3C
SHA-512:	63EFDF26BA21F88B2B6916476F278FE2DEB71A1CEEC84C0AF2F95760C620CC318580EE234C275732BCC798CB45EBF1642DB51071A33B72717EF2771FDC546F96
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30309!3i18994!4i256!2m3!1e0!2sm!3i690435309!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=125838
Preview:	.PNG........IHDR.............k.XT....pHYs................oPLTE...............................puz...........y~.................{...Bx............Z.......!a.....Z.=.Z.s.c....IDATx..........L.:........&.(.P.-'.....H...!M$./........t..Z..0....P.w1.fs..A...........D...p.....br..\w=......fEv..n...8....+.R).,A.........(...J.>2.l+Ooo..3t8,....$..Ma..D..u9.[...!}t.+AT.U`:... ......].N./}5.../w...z.Z......!.......+..~...)..M....[..=....=..u.CpY]{,A....O......sg..`z..dl..Bp..V...2.w-...^....o.n.7...S:WRNb.u.........L"`.j.Z.@..>Z..o.Fo?q..<%...........n...%X\|.[..v......u_T:m[v.#.N.....@.a".I.V......ku.F....U.S?....^}J6.V.'!.RJKIA.Gh.V`...k.v...w.)...q...y..P....lV&9.....,......=..&%........w..;..{..m.d4.......ks.......P...A...F..6....E..$..J....OV..c@d ..zuYA~..(.=.@..#.....+&.R...!k..4..w....n.!H+.j.fG.TJk....@....[(d........F.`..Z..T`....,...@mR.....W........d.iB...KU......w.*@.g...8.......oM....[.E.PX......l.R...l..r\j.W..32@!V.[.R.....k..m2D..2...kDg.R!.Z

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.6038725450699465
Encrypted:	false
SSDEEP:	3:reunSLCKIhSqy69S7UnPonc2FzkmSsyLDFfnoSkUdY:rELJIos9S7UPZCjSsYDFfPddY
MD5:	CCE179CB1F9C962600E6E783F4AC9D4F
SHA1:	312B8C4E607338215A936C99B84FEEC89884536E
SHA-256:	CEE27D3C73629AEE561F425E4E4057C03B199ACC6951A6A4BAA1E81CFC55BBE7
SHA-512:	CED07468C244B88E845B1773027ECCB1341D026C2F5C936218C7824119825F30214214E6545CBBDD9FC01F5311227C2EC14C5E97BEA80F7FAD5B849663F0F6E8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgn8Ki4DX9vdQxIFDVCmHsESBQ3ig__6EgUNYsHwdhIFDcVHC58SBQ0tz_DgEgUNIA08khIFDRpa0FASBQ1-4B_2EgUNup_YdxIFDYNyFSsSBQ2InJ1G?alt=proto
Preview:	CmMKBw1Qph7BGgAKBw3ig//6GgAKBw1iwfB2GgAKBw3FRwufGgAKBw0tz/DgGgAKBw0gDTySGgAKBw0aWtBQGgAKBw1+4B/2GgAKBw26n9h3GgAKBw2DchUrGgAKBw2InJ1GGgA=

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1501
Entropy (8bit):	7.098269821866374
Encrypted:	false
SSDEEP:	24:x5i1he91Wwjx82lY2T3o5VE14VYJ4Vb2yJ3VI4Vh04V/GgMDS9XHKHFazxOPtqPs:MqQNn2q261BJ33r/OO9XmQtOPkGhRHHN
MD5:	C8C0701A09179919F6BC2F6EE5B74EF6
SHA1:	DA707055E7821C96961232E9B101CBB2F7F138DF
SHA-256:	97B2893EBBDC56C81A2A238B8EE439F478F4C220752F9AF48D751B86CEDB468B
SHA-512:	F45CE05E6C550A66C0DA5BFAF8FCCB197F76BE74FE58B33A12A7CB48FEA183F41CB20780FDE2A274D3829DAAE4267B23EEA61F28910B544EBBE2513AEAD9E516
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/images/comments.png?1644377169
Preview:	.PNG........IHDR..............@-.....tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE9FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBEAFBAE11E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6326BBE7FBAE11E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:6326BBE8FBAE11E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......OIDATx...k.A..wf7?0$.E.EP....9...lp..Q.x....U..(..[...\..^<x...<z.?`=.b ......MfKj..K.L2.......Q.._.v...)

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x262, components 3
Category:	dropped
Size (bytes):	6375
Entropy (8bit):	7.913606469674254
Encrypted:	false
SSDEEP:	192:uctye2+racbkCUTJDPpfRv4mT720Y+/miV52:uA2IjkCUtDPrv4mHdk
MD5:	D09A424D28A5F05C4497AC8FF6BB8043
SHA1:	5A972A264B01F3391EB16AE1E0ED82C2DB18A480
SHA-256:	F5C3C0429A9D66CEADD651F9E41BA479CD1CE5F5EBA9ADDA8430B26D23FA8153
SHA-512:	1E651DFC91D66FAAB4FBE05D74D96F8EF08448A0937D04F9E71D3EDAB284F0EB81CB3EA55ADA7A8227D5DCB3C72C56B33F70F402FE1BEF423C8C8C501CFF6FBC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA....................................................4.........................!1A..Q"2aq.#.3BR...$4b........................................................!1.."2A............?... ...2. .. .<r..Q6d1}....h.s...0.4...0t..ly.....\t.v.,;..h./...0V.k@5....3Z.Z.Z.Z... ...D.".e................N.F.g.ur....8[.S. .4.r.^2..p.......=.P1s.7..s.-h@>.....[#\.<...)..0H..$...... .........l....a.o.6..GP.\|.M.T.@..-.f#v...P.=...-d...L..Cc;.n.@T.&;..O\|...&a.G..;.......Votq......d.Z.#.G...Q...4.Xr...H"A........&E......h...D19....gd.Ku...p!.....r].t...1.B..L!...Y.L.K.h$.\S$......@N.....#o#....wL..1$.....ia...i./p...X....N...D..mc.._......5.D.d.@$.@:./..H...^..........j.K.>.S...s.a..l.<..@..f.F.\m..X.<B.\..e1..K..8.u..,Lf......I.#..........0.....f.CO...m..p.>.o,/{...<$M........).=.=.<./..U..#.. ..Z. ..ar..r.n@-. ..<..R

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1119), with no line terminators
Category:	downloaded
Size (bytes):	1119
Entropy (8bit):	5.51562200178137
Encrypted:	false
SSDEEP:	24:hMiRO98RZc8G9P9MuaZDkrO6zLbcX8ruuPPUx:NOEtG9zaZ76zLbcM6uA
MD5:	5CD815009B36A211E72D62C304009F64
SHA1:	6B104E1B9E03F48CFD939418F8E99B1B61DFE1C0
SHA-256:	E5FFC64D6EA6E66898ECA2DC6B48755BA28ED00C8EBE99C2F023481C025EBB07
SHA-512:	94FB5CB33B467850D39CEB4A175C58CD049385C3DD9882E2198ADE57AA25A1DA6E1310E52839DC44091FFBB6DB26DB258AC1E41CEA1F26A9BC6F30740CED6A82
Malicious:	false
Reputation:	low
URL:	https://12345.fls.doubleclick.net/activityi;dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	75
Entropy (8bit):	4.298884445373162
Encrypted:	false
SSDEEP:	3:YiXJEYEzQ/GZD/zFKeuoZza:YiVEyGZ7JKePZm
MD5:	F191810769A4743BCC6EC1F717372423
SHA1:	B5E0B8F8E874E4D89A35B47E5CEF4C5D5AF193C5
SHA-256:	F9EB1516BF4D7FC0170DF292CB4D622398F953F48A5C9EFC3EEE001A45809BDA
SHA-512:	92A396284D7FF9B126197523C6B363C94FB78F8B6C95F4208206C95834C662AECB1C6929F2B49FCBE8BE2B4BCCCAEEA021B9D51957C70DA5844D56184F477721
Malicious:	false
Reputation:	low
Preview:	{"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}.

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3
Category:	dropped
Size (bytes):	10187
Entropy (8bit):	7.9178709594981544
Encrypted:	false
SSDEEP:	192:HdUfZK6ruWFqBt5T0IeZdW1oMC5njiJ0kxdsMz3yXF+:HmZK5KqBb1K41W5jiJ0Osc8U
MD5:	135E61A61184CB0CECA5447677B64D5A
SHA1:	7BFCA7AB14C7BE8688729FE5C76D01C15DCCC0FC
SHA-256:	86CC78E492048DABF9309AF79C2504CA65DC7DD5D071259060517AE4BD494DE8
SHA-512:	7E9111002C5D2FD366761BA7DC229A596D8C45954B1E0CB07A55999E737B20B84903A47FFF7221572576DE55766C47EDFFBF77BFEBC1F3FBF43FCFA3E57F870E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................A............................!.1."AQ.aq..2...#...$BCRb...4.D.....................................3.......................!1AQ.aq......."2...R#..B..............?...@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(...N......P..@(......P..@(......P..@(........Z.\.Oo.yj...h.........H.%(.q.y:....i...>(.M..E..d......[.2.uA'.R...()E+V.?_..Q.........<....z_..-bQx.......g.[....d./._.XKNB.Oj.....`n.)MZm.Wn.....~......9.6._N..?:....7.Z.6...cW.]..T..1...N.'..$v.....V.m....t..I{....x...6.vMf..X..7v..e...R...Lf.o.XJ....n...Q..i.[^/p...K...u ....P..@(.....C.@(......P..@(.J..;.:.9....-.M...)R.....t$l......t+...KN.....a..)....!..,.~.."..d.V.w...Xil...!K..}T..+.ms.^#-:m_i.......K.....3.7...Q.6......Q......{...JN.}.\.*...%.5.I..:...m./'.s2.h..L

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783)
Category:	downloaded
Size (bytes):	33293
Entropy (8bit):	5.374324088959794
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5pxBMY/Y3YO5QYZYqYHYFKmEwdOiGaKFqQ9lF:RJeUwT7XHMwuvC43WP3
MD5:	378A593A92F3FD1924B18D13FD2CA2C2
SHA1:	457C6DA51A9542CD06D6F87C29EE414693778FEC
SHA-256:	40EAE6271A39EAEA3BB63026503F69FF3F342DFCC8C863E17EE6AB33211C7AF8
SHA-512:	8ADDFEAF9166C760110A09A6416BA84432A4B0F75D29E7B7FF1731969CFA23AE0C617035FE6E6391C0FA1BDFFB120ADBC5F4E146681D25ED80B57470D13F34B0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/2179726272122089?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C150%2C179%2C181%2C113%2C135%2C145%2C208%2C209%2C207%2C128%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/359933816.jpg
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	13127
Entropy (8bit):	7.953153532424953
Encrypted:	false
SSDEEP:	192:xCheZvOZn+BbqkfHMMi87PQ0/7qwqqKbSrnSZz0u9x9EeOgLRYm/F3iZ9WLiULh1:8UGkFNHMvoQ9bAS0I0eOgZyZ9WLOWh
MD5:	16C984A1042FC08DB2463BB4CB2BC5B5
SHA1:	6B321192D173C46C40B147A2BF40499D8CF9D0D8
SHA-256:	5F4344D00D022AC7600DDBF53383887B3341FD73A8C61A01C02587CC94799A3B
SHA-512:	B51E0B9F55C4BAD4BCC0FBE7CE5DE11AFDEDCED7861549201AE11646508CFE7E5C5B4C0916A14C0E930A7F4575605238F6E46A542C8FBA7FEA30577AB33FBF26
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30307!3i18995!4i256!2m3!1e0!2sm!3i690435417!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=51145
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE................................................y~..........puz..........................................Tnzo..$.DQ.i...Z]a...{..NRVx....8=.Z...4.S.@....2TIDATx....:.6.`2.X.r.Ns}..qG2.....w..G;.^U@aY~.,KJM......e:~..]SWK....S.RpL..w}&i.DC......=..h..f;...HU.....'?.";..j.F`G.......G..#M>.?z....}>W.F0*...>="j..4.......x=..Z.;#.2.j....6\|.w.....0...q....t:).a8..c.v..5....U_.....[.R\X...8.I....z..r....2.....r;..1...v...V..^..ik;0I..ck.....2.r.......f.....<Ow.U.;l.....j&.t.]].; ....Q..'..r..>.....X..$.'.,.S.O.]Q......R.qIh.v.....?.&....g.a.0.5+...D........PU......(...E...:..o..;. .....E,....e.........'v.X..4?..+.F.........L.@.i..&...v.f....%...b..r.....0$.N.7.G.8.0....%.R. .....(.4B...I.y.....S.%...]uU......9...n.&..d...O.!.....?...)..P~)...$GiPz...TM.N@..ax(.].m..^S.{..7..TBy....MA.2...uP.\.~w...&.Q.c.hC.o.%e.f.<v....n..@.oy.,\|/T.<Q.....V.n...."..}.zj.OD....".v.n....I...>.....v.`1....iU9j

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 477188
Category:	downloaded
Size (bytes):	146401
Entropy (8bit):	7.997622074963662
Encrypted:	true
SSDEEP:	3072:r/W1rvJudp6bgTLeljeUzCrRzVkiYHkOgCkUyo2axeJzrTZ4wi9qSbG:rsgSgTL1UzCrtVktH1kUMlJ3Tfi9g
MD5:	F98285E1B2933ABC462A422D738BAB6A
SHA1:	FB65E6C5836B0308B010799DC2ECDD80F55FA918
SHA-256:	82983FD02F97F814317B211D5FFDADA47D4016FF28103B101087B07A6CEE1E69
SHA-512:	E5626E6D2DF878A3A74242BEC0DDDD1053C7C198A65D32EFF6B9DFCF934C3570792711DECDD218E3A66125D842BBBFBBA643CB25A659E233A7BA8DD65775615F
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/site/main.js?buildTime=1644361842
Preview:	............{..6......2.:.E..$M(3..q.d.i....V....d..I....g...@......L.x...`^...e:-.,u.....2...Yv;v...$.......{.L.;.CUC+s.?.Z...O.?...<......&"....v.[-.b<......o.],..n.X$w...!.....OZq..!............^G...m.-D^.u.Q....x.J..I...f..K.$....q".......y.z\4]&..{.Z4.O.M....\..<m.n..l...8\.C.....f.."....x\N<Y....."..B..p%...gA.'Y4..`.%.....c.Ti?..g.4.r...B..sl.&I....l)6..}..V.1.^......y+L..rco#.>J...z...l...i....D.c...Yt.st#\.ZD3...E.}.........<^..7,.8.S.Oe...c$....u.....e9.<...K.<.E..a.]........Atyx.......~/...../.9..0p...N..f....M.....E.f..(p...>z.............~._.........8.?.L.......A.\><zp4.........x4./..........................3x0.....x\|....Gbv..}..(p.y$.....\|.....G....t./.a.KF..g..3.@..7!`Aw......\.A.7...]1...".Ew...~/z...i.B.>==}~vz.....m.2...Z............0v..B..........3]BJ..{!..;.....O................Ld....(....[u$......s..8v....C..Z.H..x_=..@B.[wY&...^7T.......YR..i..x2lH.+<5..lzn5=.R./..1..q.Pk.q......./.Z..K..V..Z?mj.tW._l]...C,.F.

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23553)
Category:	downloaded
Size (bytes):	23678
Entropy (8bit):	5.427979461148156
Encrypted:	false
SSDEEP:	384:EqhROTku6loITotJt0++gdrDRvDe6AuXlnqkxXnATMqBpbKRUQ7LPxxGTyA4tt/:EJTku6lYt0mg6/qYATdBpbyxxkO/
MD5:	6EF104090AB8672EA053D27FAAFD4EE9
SHA1:	D7217A3C3A2F5D363396E28C8AE2B96DF1C2D3F5
SHA-256:	45A4C240A17A4D5F925EF0E125B86D882C6AD7549028D9CBF6F4F06FD1DD897D
SHA-512:	92205501B1B01F4173A16A57AAB0D847C9F574FC1A44A14D62E84AEC7EBCCAACC399EEC6823ADF082E7EBE766EBC8BA8C580E69C73CC7203D8C4C22B3660F6E2
Malicious:	false
Reputation:	low
URL:	https://secure.quantserve.com/quant.js
Preview:	/* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /.!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"===t?n:3&n\|8).toString(16)}))}var n=function(){try{if(!window.sessionStorage)return t()}catch(e){return t()}var n;try{if(n=window.sessionStorage.getItem(e))return n}catch(e){return t()}n=t();try{window.sessionStorage.setItem(e,n)}catch(e){}return n}();function r(){return(new Date).getTime()}function o(){return new Date}function i(e){var t=new Date(2e3,e,1,0,0,0,0),n=t.toUTCString(),r=new Date(n.substring(0,n.lastIndexOf(" ")-1));return t.getTime()-r.getTime()}function a(){return Math.round(2147483647*Math.random())}/qcdbgc=1$/.test(window.location.toString());function c(e,t){"undefined"!=typeof console&&console.log.apply(console,[e+" "+o().toString()].concat([].slice.call(t)))}var u=function(){for(var e=[]

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3600
Category:	downloaded
Size (bytes):	1372
Entropy (8bit):	7.855720867027333
Encrypted:	false
SSDEEP:	24:XXDXYOfsdPnWi1nFbzuJeFVEP+4dzyrrYfxG/03Tqq1ODaNpJPKRJwo2LPlJpuMi:XzXYOfsdvH1FbCMFVE2+yrrYfxGcj912
MD5:	121A5B9688D8E70EE7BB06CC79491F76
SHA1:	3A28220BAA7D8879270C8311BED7DDDEFA7E43E9
SHA-256:	181716C84474C9EB6685A809D69DDA5D49CE44DFBF64C5DEE89A3091E23DEF40
SHA-512:	C06DB9CFE352EE7A915D59DBEFED36EF6A473C091BC4EBD4BFB34E7596D27A14C2AD9E532D997D07344FD050D94E7FFD9BDFAE2CDDDC9C0D72AC496A66F10B09
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/js/site/footerSignup.js?buildTime=1713980951
Preview:	...........W[o.6..+..%d-....].X....K..(.Z:...@QN\E.}..Yv..y.-R.~...\GN.M.+6.......X.Y!..>.........Rc]6...-^4{...d<.2".x...r.Z$.....d.{.l..Z.;..q.I.6\s7.a..e.r.8.f..8..4.X..6....._.1.".{.cs..v{.....7....J...%[..NX.h1..j...W.6.n..9J...'........H@..7...k...~....`..Yu.U.s.X.....n.6[...)..v.sG.O.....-.q`G.\.<.EF;!5nl^........rI..%,!(X.v<.g..b..7\.oL..V?..6....s).1...uoX..c........r2aA.Y.T..Y...u....QR....KN..!`..,./-@...u.[o..T.........XP.dn. K.......,.i.:.h(I@....kF..0....}r..(.......p...Sr..U.....Dd..2J....QV..u.N.}\|.=.......Z..O.\|2......@....... %.w.z..;...eM..m}.............U......~lG.....+N.od\|.}....ciJ.;(...8.^_.....Z8.......W..s...0v5}.VP...U m...n.+=G5k.D..j......Z..:W..(./..R..VV..E..'z.)..#.....s...Z .y...]..Y..O..s$~6....U?=..dr....Q..y.aY..w5.G...I.1...^.S.=.......Y...V.S@....-BP...H,...Oe"...S...L.Q....q.q.@t.%..v....G/OO#...{o.vP.vW.).k.C.D..xL.J.Z<..e....z.>.n...e!.y..LF....k.w.a..S/.:%.P.+.g.G..AD.=...q..v....6G..

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17111
Entropy (8bit):	7.971917216750678
Encrypted:	false
SSDEEP:	384:0ntBr59tA4CtCJDyhXbT3bCEYNKoB+5d1UmLt4kNHS+rRJatXNOJ:0rDtAJCJDuXbTLCEXoMT1UcnXR+sJ
MD5:	6306D0F612F8FE43789569053FA5822F
SHA1:	4F9F0D91B10E63B605C80E9E024E87357163FF04
SHA-256:	9E50C3A0412895272220F33805951A27010CB4EC5DAB83709E4FFE9450CE179A
SHA-512:	CE4AD32CA8551E9415FC94A45351A8107689B6161E6F1503DB132CB33089A94A77EE386C5F5AC2F63023B0DEA5394291F7A912C3BFC173253AFE2B2D173B67A1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..............................{~....puz...................................................NRV...............Z]a........ehl.................j........v........ !$.g..s.=.ZR.....A.IDATx....v..-.0333(+Kr.;.}....D..H1..o..W.-Y&P...\...S%.U..<}{.....x^?..N....U.?>H.hK...`..v....+Oo]..Q.(.,I..I...a-.VF.I.....z..'....].?.^....gW.V..`%..$..\|.b.....\E.)l}....6.lcXV (-oXK&..;..._Mxo...1_z.....{Y.9\..:..f.R..="...~.Q^..\|9Z...O\.hB6.%...78......r.D2OO'...+..-..o.....0.UQ..4\|..c.Z.@>..U.... .f&.<F'..V..........B..G...x..{.O.....\|>.yzQD[.....>.z0..'.+........1.mB~..n%.....qc.....A..LQF..p........&..n.s..\|.<.:h....N...g.o/...o...iqy..h..N..x..0.o.g..h&/..M..%M."..$...O$)[...W..R.(...I.E.).d\...^.^:..!..(..........X.pJ:...7..e.e!..=H.._.@V_<.... :...I....]..*~.M.v....N..v.(....W..-....2....4=..aX..L...5.DG.......S...@v.w.0.J.].Da3...2o}....P.).\;<...B@.3V).....TK.$ys.J}GT4y.i7vI7r.....'..".=..

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x563, components 3
Category:	dropped
Size (bytes):	31391
Entropy (8bit):	7.857202289298064
Encrypted:	false
SSDEEP:	768:ZXI3YywIDM+UgpPF5CX6UrakVc9Ie5J/XDUhUn7p:ZXIoyTAbiCqUrakK9nUhU1
MD5:	D63B71343E0AEB3B727F0CC7D5C3A2D8
SHA1:	A681268178A23498CA0948F08EFC382B15AF732A
SHA-256:	0D0E08A986B9B27B58FA1749DA4576D1580A63FD981A700D29551EC10CA52E1B
SHA-512:	6AEEFDCA074942EFDAEA4460D97F4A5A7AF85BC5594D707F189503DD30AD354B7B7C04D2C98B73A4EDB8E6FBDB3F82CDE38D2769CD473AEF82136EF13365804D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......3...............7.......................................................................................................................................................................Q.T.7y\|..................K._.f.;....................G..'b ..c...v..N. ..........py..2#.).....X.#.25.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2633
Category:	downloaded
Size (bytes):	886
Entropy (8bit):	7.74696565488942
Encrypted:	false
SSDEEP:	24:Xy+BK9FyqSYjay1sTBAuu72DSMgpFWSyYH5Y5RHc:Xy+Y/kYjay1sTKuyM2FWLYqXc
MD5:	5C465ACE654DA8D0E367F91E7751AE62
SHA1:	F218F483ECCBBA5BE90ABF97EFF819569329F8B7
SHA-256:	0C91C8E311BC809644913A2FF023585BA587ECFC834BA3CD152544E75D422BD9
SHA-512:	5BD45B2854B65DF55A3F5CBEFB56EB2478A06BF8789254B6792146F261F875DE6890FFDC2C00812B2B6D1F2465B2A80FC8B73F8E218559A99553D362925AE915
Malicious:	false
Reputation:	low
URL:	http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951
Preview:	...........V.n.6...)T..$@.H..YP..-.^.@.'...D.".....~..)z-...nn.9$g...nv....R......&...q....`.B..6..@.k\&k.r......8........_ ..x.....d.......2i......H..n...L.d...U.>.b...5e..f.,T9i..Q........._....4;.[k2..l.U`..,w\Ij@0..W.j.......X..4[.>.udi.i\....U^v.C.......8.H..l.i.....R...5...TA...iH%.G.J.Z..@E...8VX%:...4.M.9.5........;N.....b.Y..f.....O?+.d...(H/#AP...-.R. .q/...,.A.#.....k...5..3.[fj.I.s.L..S-...+7.Q...oY..3.v6.?./. ..[t...*.x..Vn.an...nz....[$..kA...\|...@.@..ko..K..mvw..E..e=..JV_.....:.m...i.:.rl)...G.PiA.#.%xw......m.G..Ln..f4.s.P.,..?0M...-]./....N.^.Y..V..Q@...u..v[`.....B.2...{x....Q..WJL_-0}.....c...m.....)f..i......W....b...}.![./x^...~...W.je..8..r/:t.$;.\|..bj.U..]t...S\|.8/...Y.F.zJ&:.B........sD^..i~.iz)..........yF.\|..W..K.7mJ!......\,<..s~.X..W..\|..xTF........l....7'-'^...9....t.wF....b'z...e..c.<....?..I...

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17926
Entropy (8bit):	7.953335225515369
Encrypted:	false
SSDEEP:	384:rI8m5WSqxdnsUn9wMwzJPiEHP6y8d3YQAnk5Dtx1yOPulQHnh1dx:rI8m5WSMd9wv9BHSgwDt3yOEQHnhl
MD5:	35C0BF7E9767300F95D826DBAFEA69B0
SHA1:	E7F73F8C8437B702038EDC8D9E9E0BDBB76E7C0F
SHA-256:	1E5F1F35957304C79CDC7DD03A3FA4134D3F4799D4C47AE1EEDF6783153E1949
SHA-512:	101329408CE35CC9446FA710597785675D22677D7E33A2571D2DB9481B53D0C5AC1AC5D9B1DECC493CD55C5E8529443215D16C30994BD0457329BFB057BBE835
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz............y~.....................................NRV......WXZ...ehl.....'.E..i.}......8./2 !$N.f.....%......4.S=.Z.....J..o.......l.C.....D.IDATx.....8.-......+}.j7..s....... AI..3....2S......M7..q.m:u...n-WS...,./..5s.;_ZAQi#+.6..._....{l.b.+.Y..G...ZY;3._...^dzS}.xz....+.z............w.....U_.Q.x`..1...j[..........l..h..3.L..3.\.V.O..B......<...c..'....7V}.A.XXEA7..020....z..w........j.......2w\c.m5...]....\.?=[.V.:.].M......^1.I+.[.....>.@........F...&....h....2.n8......F.f[.Nn7.).ol...wZ3.v...4c.....0..pS.....MQ.\|....\|.B..U...g..S5\+.2..H..:u\|l_?.. p.....x;.....f.v.:.!....;.....bgu......X.K.....Yt.3/AaN..j.u.Z.....7h'.?..+9.D....eNv..@.J..........TKb#.Z"XM,y.... ..,...-.5X.k_\|.f..q./..{GK....K.i.u...........gw$..>.q_.J..........jW-..c....'.U......h.........{.......O.~.\|.u...n...."....$..c..?..\.$.-k\|..L.~....-.....e.g.

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7990)
Category:	downloaded
Size (bytes):	471771
Entropy (8bit):	5.568776177494418
Encrypted:	false
SSDEEP:	3072:VQrLY2kiAGRx0KDCJcrjrMwmvsPJ80c+celRDKRsHu8aq9jpgc7S/i18EvJZGwS6:yKXelhksn9jOc7S618cZGxrpsU6FI/kj
MD5:	33A3000EECE7784ACD3F3F549BD68681
SHA1:	26D08B5E1BACDCDF7285828ED054EC51B036050C
SHA-256:	B596A0633894D6169C371E198686DD64DD4DE5F5EA686BFC609098E367A5817E
SHA-512:	6EB1F9D8A6820797487695E1B1C80CF3578D067A5ED9B87DB9DE2C92A7197DD45BB7AD7B459160EF512D497C3990EC6001073C49F8D33508064583B0EB0B7707
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i_8K4/yu/l/en_US/RRm2quQ_ymn.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);.__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChangeSubscription_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"environment"},c={defaultValue:null,kind:"LocalArgument",name:"input"},d=[{alias:null,args:[{kind:"Variable",name:"data",variableName:"input"}],concreteType:"BatchNotificationStateChangeSubscribeResponsePayload",kind:"LinkedField",name:"batch_notification_state_change_subscribe",plural:!1,selections:[{alias:null,args:null,concreteType:"Notification",kind:"LinkedField",name:"aggregated_notifications",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"seen_state",storageKey:null}],storageKey:null},{alias:null,args:nu

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 29814
Category:	downloaded
Size (bytes):	7548
Entropy (8bit):	7.974174473239323
Encrypted:	false
SSDEEP:	96:nLcX/JMcaopVsGWS5fvJsunCbBtfFcOr0MU5tzXpQE3WP8C1XVOnZkt9T4MwFZ5Z:QX/3sGb5HbszLrizFI1NAMwlD3L/
MD5:	5505DB8765719C088AF6F8D26D9B51FC
SHA1:	C8DC1AC380B067C8F89F69C580311101FFDE096E
SHA-256:	EA02EFB67C26E56ACBDF967199A665407DF2D20CC078394B0B79498E2B649751
SHA-512:	1750F32BBE3546BEFF485743F8300C7445071C0EA0B8442BAF088F729331BC3806A377B3F4C7FCAAB5CF4C537D22866667BD63CD2D6DABFB2004F07CAFE751DB
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/our-partners.html
Preview:	...........=ks.8......f/.g$.eY...u..l...D...."!.1E2.iE.....r?.~.u..K"m9...]yf,.@../4.A........_...,...}."6u...sJ.;...&\|...+....'.....sR%.\|.....r.[6.c...X.C.......9.(.\|.c~....i.[..9t.J.p..9...........DG)\ij......!.T......-d.. .s......-.p....G........;!...s.L...$<..5.L2..^....L'.3.D..-..J\|....\..pZ.....Y.,..C.L.."..9.8............3...u..B.v..k.Z.......A.q..=.Wmw..iQ..o.C7......)p.?.=..u=(.J.....+`_.....cF}.A.L....F4.A..b....T.e....P.U.P!.c......AC.W.P4.....#...m9W.2...xuL9..`...3{P....1...z....3..l2(.j..4u0.`.D$(................q...:h..7..E......:.r.~..~.n...j..S\|..\|.`......a}b....&eb.Dm.V7...s.N....#.....UE..'.H..&`+\....f.x....:.....l........7.m..$.=...m...w...j..-.E..h./..iy....G.....w..`..xW.bc6..)....T'..0..?......{.....t.S...py.l......T.k\%..:~/...(e......l.f.1.....d...[..6J..n.tF\.@[.Z,(.eZ.0...a..Jo.`K..`.f..(..Y..v/m~;G.`.....&G..v.G.5..@..U..........m.b...dm.C..}ps....J.h...]...I.t>m..4k.8..zzo5.b.\.t..........y\|&

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9713
Entropy (8bit):	5.354114553801451
Encrypted:	false
SSDEEP:	192:ebkfPUyAQgtNBIWguxw68uCZItctpwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0Pp5bt:R4rsCN9cO51r
MD5:	07FEBB7C58E3DEEE5D1DEF444CF8EC01
SHA1:	47EC3853471DBF61CB2E09F1B0016397703DF8C6
SHA-256:	3C4F86E9CCC5E942B4003BD9FED721D599FDEB7BCC1A2DB63A95CBA24DE5F828
SHA-512:	BE6AE39D65F335C3D3CF5E200A6247399B44DA03AA7DEB24A35C85B1E9B29E388FE1305BE6F844759859B2A7C69794324A54DEDADD3F110F21CB8001B3C34CE3
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otCenterRounded",. "html": "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

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047149302
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 237 x 237, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	84346
Entropy (8bit):	7.988742534490167
Encrypted:	false
SSDEEP:	1536:+56PVAh2PHKym594nIAffiSVLiksvTKuugQGdKr/jfaHdiynvl4V871G8ArGB:K6Pqh2PH4594IAfpDsLKmKr/Gdzv1717
MD5:	402708EA4C7B568312B7516AFC6E850F
SHA1:	CD0C1F47451377005AA918328C2A84E2EE7D29FB
SHA-256:	25ACA3DC3D163C9D47B230F39DAE8C4219A50E7BFA348450B9992CADB0E90D9E
SHA-512:	660DAD006F44BC34C97D2BE660FF15DB98BEFCB5131CAA1C559C9C89F116BF9DE99605116A07B2493DE61995E89FB095BAE64C2A7CC6672E5689904C6F0FAC3C
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/lucy-taylor-237x237_orig.png
Preview:	.PNG........IHDR............../e...IAIDATx...w.g..?g..sv......'.M...Q.$@.,..3..9.Z..Z.s....U].]..%...{.e+.#}..g..=........r.}o.....k........-..Xc...+/~X#.5.....>...:..7..w7}`....\|yB.x... .7.....g.G8.yI~....'..........[y.........Z......wC.e]..;{,..."...<~).WV..%...n.8...M......F.....[..%..!. .Kp\|..../....5...D.-_..WY...D.._......\|.Z.6...=~.K.z...u...2..-Y..AP5,$........NEQ................{.Zy.o....\..1\.......o.ky.5.,q..O..VV"$!.....!C.2....Y..a:$!J..[.y........oS<^..fa7#J.D..X (.A........e......5............&.G..?..,Ko...8.....?l..{....#y..n..@.Nh.2$r.<..x..r. ..Y.........Ra.<G..&(..<#.. .@.p.!rs..{....n..,..;.....(......x......./.f..$.C............/...~.....Q..@..."...=.;.?..y....~7.....2...i^.8> ...d..u.En5....h.........[UZ.&...7..@c6..AX.xc#6.}....O.fyu.C.t.$.m$l0.p.....{8...h..s[.........a.....p....P}0..Y..HA.8..xJ.i.gW.y....%.58.....z._.u...Y.xs....o_......=f...a.. ......p........s.I..p.=..fW.mKn.<f.....n..;.r...a...t....e%...2~H<.

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (56043)
Category:	downloaded
Size (bytes):	327164
Entropy (8bit):	5.5061054495525745
Encrypted:	false
SSDEEP:	3072:zcLShNRXSBeNN9dDon/kyvRweEXMV6AxBUjqN3Lj1TKid0bGpLsev6nsRs2hW/:W8N9+/k4fMqz9GCNvmszU
MD5:	81267302EFDFB3E4524A22631A8FC99E
SHA1:	EFB274E7D019D5F3CDBEE88D317F46FE45BC91EE
SHA-256:	70C00445D6632039ED99AF760731DAF3BF60EB12061863EE61E2CD7276A54D18
SHA-512:	D378A12E5465E2DEFBBB794D1F5CA287D8A9B31E16482F782DC6C53D9F6CB4600B8B2ADCAAC0CCF963AA06B42569C8119E16987F59FB052B4AB1254784ED5EF0
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=http%3A%2F%2Fwww.painrehabilitation.com.au
Preview:	<!DOCTYPE HTML>.<meta chartset="utf-8">.<title>Twitter Widget Iframe</title>.<body>.<script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?functi

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16764
Entropy (8bit):	7.952763185601751
Encrypted:	false
SSDEEP:	384:bYu2uU1ax8RKL9xOtIaumdaR0TpjC2NmmPraxmoiqt:btj6K+eaOR0T8XmjPof
MD5:	B3938F5185F2565D9FC05CB6AB03F69C
SHA1:	C4268F88755CF5C67318580CBC648927F611B1D5
SHA-256:	94C10B70673C4622F6DE1B5284672D7E322418F92C247D578BA1F99B17B6E4BC
SHA-512:	6DEA5F40F87AF8FFC51A903CFC590AE5F46457CFF5EB24E32D2A344254C5223D9D9035475FA3E24B893C5FAF49166AA270B83A5E2B32F77C54A717390648CF06
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE....................................y~..........puz.........................................................NRV...........Z]a.........=..%^.w...ehlQ.i...'.E..J....z..]..8..o..r..l.C=.Z....-.A....@VIDATx....b......fCssw8.......+U....>w.t..$..e....RI...../J?.....%.V..k.'cK...;.G.Bg9.%....R4SJC'Y.=.T\|h.gc..S,V...E..b\|s...U........V.......1}...{.fE.)e5t!.~..V..I>...D.w.X..%MN%OP.I.Kf..l..u.q1.Az..Te.j...NW3.....r..^J.>.l.D...^1.7sM.L4....g..vI.'..Zq!.V.'\@.".%...r....z..7...f....>..V\.s}.X..?W.<W...U/R"........z.X8...PJ..G.....pI..&#..h...&(.....V..Xz..L0..;Vo...]y./../..7V....;W..9.x,p.ih-...4O..X.Q.byu..\|m.L..BR.......8_=.`.VQ_C.......jery..~T.\|k...2..{*v.P ..XoX...H..BvcK4).nv.._...\|...^...j.2...JF.H.X._1...Z..Z.t...6....".#..n...}...I)..v'.:. ..f.a......9}_.f..?....a..a...:........@q.//W....;...........).....m..f..F.z.dMs....U...Ce\dc.K..).....@......B~.+6.......Y.-%..Z....x..

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?_=1714104698885
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/974213796.jpg
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3127), with no line terminators
Category:	downloaded
Size (bytes):	3127
Entropy (8bit):	5.95038665863959
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08iHElD8P+y6FYc0Ck3R4/Nk:wsbSUtJfxrqLWWWdV6j1KECr2QyNGRrd
MD5:	B0BC756C40D0E214A761C0C56F7B0545
SHA1:	7A685F757F1A36A1E265C422655F1D66D6B52797
SHA-256:	E72E281024CC0A5814208367EA824F63B35488E29F300C7C3EE60E0E1C2B8281
SHA-512:	06F0B3B1CFB7783F739EE2A99C97DB01DDC6BCDFDEC2CBC8B2672AAD3CE35DB4D24284B28B24738DB070E3F577CBF5CF42E846D6993E9C2B513A5A1CB61DB664
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/630646945/?random=1714104722926&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22936), with no line terminators
Category:	downloaded
Size (bytes):	22936
Entropy (8bit):	5.592645230394191
Encrypted:	false
SSDEEP:	384:yAtgZVMIuvrW80CeIgT/yymdbJedb9FWU9GOpXBPYqWFUYg+GMnuErh87Ce/gk/G:HxDJ0P3DHCJq9A2zpiHxuca7P4YMrJL5
MD5:	C466D8DFFA3AA51B4825180246DF3A94
SHA1:	FE7DAE80AD2F29E9BEFDBB12135E857E2B1C29A4
SHA-256:	01202641B47D378841C6FFDE430B9F99B4A320BA5F9D195663B52057A30A837F
SHA-512:	1EB99D5C94BA53B35E28AF952E2D1628836DD1AACB707CCB0BA4470615B25011CC1038B5D26F4FE0A206DB8284FC1832C89FB4BDFBA6BC1C442C5E5A53420F4B
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/984344943?random=1714104722660&cv=11&fst=1714104722660&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j481831569","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481831569\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sEI-ckg!2sZlK2lA!3sAAptDV6s3IU4"],"userBiddingSignals":[["1278457","468327996","455615919"],null,1714104724491738],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161731983564\u0026cr_id=694222103922\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17399), with no line terminators
Category:	downloaded
Size (bytes):	17399
Entropy (8bit):	5.604477886868461
Encrypted:	false
SSDEEP:	384:y4Yg+6MnuErh87Ce/gk/Ry5dbJZdb9+W/9FOGXEPYxWYUtgZBMIuvrW80CeIgT/f:auca7P4YMrJL9LVYqpEBxDJ0P3DHCJqt
MD5:	080A6591E50904EE5AB53B87FAAB3FD2
SHA1:	3F8DB2B04DCC458AB7BFE8CEEA37B75E9045356A
SHA-256:	474599DA754BAD04F2BF49E3FD0C9BE58811DF3502A4FC4948705B7EE796D63C
SHA-512:	BABE6AFB65D4B49A665A7AF75C2F0234B11C2E1606E46C3F02E4AB3ACC0B7AE0B842FB438F661618A3499220AE36315839472610F50219B48854A7F2BAD543A7
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/984344943?random=1714104722646&cv=11&fst=1714104722646&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j468327996","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j468327996\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sPRFruA!2sZxh3lA!3sAAptDV5r7LaG"],"userBiddingSignals":[["481831569","455615919"],null,1714104724375764],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=161731983564\u0026cr_id=694222103922\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rd

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2466), with no line terminators
Category:	downloaded
Size (bytes):	2466
Entropy (8bit):	5.961792100125828
Encrypted:	false
SSDEEP:	48:NO5p9Yc0Ck3HeoP/2R9Ks3WLaRP3pM5jpXsiA2ymKZidk4hS1ugq:YTQ12PKs3WLC5cBJZdk4hS0
MD5:	9FB74D5C59E65A2997D18E3F278B6E5C
SHA1:	32E3B89D3B33324AB7F741F3683542A9B27A300B
SHA-256:	E198D335FE15AD53D8AD730B9DCC98FC5BA40B208D650B18EAF617A018815266
SHA-512:	57FC3C763D848C3667E752B4FE9FC680E8B4D6E69A8A03DC5536E0733959624505C99A4D9B356A072F98C4AA4425B38F194CC4CFBE7321B93A2F293A4D1BD9CA
Malicious:	false
Reputation:	low
URL:	https://9628652.fls.doubleclick.net/activityi;dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1"/><img src="https://ad.doubleclick.net/ddm/ac

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 84796
Category:	downloaded
Size (bytes):	18996
Entropy (8bit):	7.989210549410192
Encrypted:	false
SSDEEP:	384:Pndcq9c5U3OKYTqtJRTWLfvLj3OU2fy47RAMz76OzsBWT+WDzb:P79c5USAMLHOUEyQBzs0L
MD5:	55C59F666197B7335778C9C7026D8AC2
SHA1:	A06805611E338A5EE3B604D16AB15A5CA7E280DD
SHA-256:	F651509AFA984760BF38BAF2087E32BCA361E51469824980D3A0553DA273E562
SHA-512:	69A14C50544627802F9181B4B80A35C990F04156F13C52765B5D4305CA7E0038FCF1470B87435E89B36D1821AD0C055D7A03DC6C611568D7E357A2E28E84631C
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/plugins.js?1530561231
Preview:	...........}.[.W....+.\|.AJ..O2_F.d.....kp.,..H.t,.......[....d;3sw..&Vw.g.:.:u..m~.8.9.......'....V.k..dk...l<..Q.erU.........._............y._^.Ig.....e.!9I'..x..;X.E>.&U6Jf.x..WY...$......G...dX..s.OF.m/....u6.{Iv7-..Uz.....\|.....d}.......G7i.........G......?Nv....^.~....k.u]...yyL....X?..'..'.._...u.U. ..2K.l...Sg}..wU.'...?..j......Y.S.#..5\|x..W}z...J....nR..g.W.~B.._....N...bV'....x..d........u...u..s..Cr1.._...A."?......dXL..?.Y=+'U....=.u.s...p;{\.s1..{.!^.$.D..9,...U.eMu..y~A......I^%....t.Kn..6..u.X..guF./&..1K.W.T)..`.Ci]...`.j..@(_..>._.v8C.=.'.xL._g.U1..w......W..jc.),67.......)~\|....1`..._3.0..Hg...X..,.xk.On...u..@G.D.Z-.@.C..yE.b.....A....^L.l;;..Z..e..A..E:.2.....CR....6q(.......v4.P..@s=S5.....6...c(.....34.T..(...YZ..].V..`cZ.g.K..ww}J..9..-.......'.%..,OuT..!.oGu....9,fN?.ZR..../..Hm.05.:.$.......vrT.y.y'.&_\|..hT..y.\|.(..C[.....S.-.*..(..X.=..&+o....q....W..~...~.=.....LN.M^f......I3......K..............T.!t

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3353354537123624800&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28076, version 1.0
Category:	downloaded
Size (bytes):	28076
Entropy (8bit):	7.992184920293585
Encrypted:	true
SSDEEP:	768:c+vBMoWEgli8JD7yjTpXVtbmFOpzqJxDDEWbqJI6czx3a6v:3BMoWEgli8yjTpXPMOAI06wBaU
MD5:	876D74BCD0A927ABA5BE92BF7993F1AA
SHA1:	1FFC2B292EB17625A33FEAF5460E84D137846811
SHA-256:	DCB085AD0FCA889C4A1B898CCC7458C5D586E5740E7B7BFFE065AC6A5E247ADA
SHA-512:	53D4BF3800E1D5E6E988DA1C725AA0829C1A33E676D43EA4F1F59E95B13F8B2257136D9C0ADCB3E9634CA1550FE7D997991887EAA35E0344C2BFAFB00AA49112
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2
Preview:	wOF2......m........,..m<..........................y......X?HVAR...`?STAT..'...$/D....h.l..$.0.4.6.$..D. ..~..m.......sp-..N.6k.z......n%X$!..n..n..P.e...iI..%...Uk......a..V.Yi....<........s`ps.2.........)ms....c..{....@0"....`BDx.N.a......p.t.2...D.m..N...n.p...>..P(.@....?V....\L.....C...Z6.._.w....~.r...L.tI..m.:.~.U....R.8..i..N....G.B.!.h.X.e.2t!.L......cQMQ..2.8.9.xH.y..a..y....qS.\:n.4.Gjs...T..... 4..1....1...tm...R....NM.).s..z...].e.-..x.......?.....vaa..#.;.H.a...vQ..~..f.@..!.....9...H.""""!.$......7.f.l.]c^k....2.Zv^..<7.:...6...S"J.I.H`.\|....+.!.MC.r....23...J..&~..c.e.6._.....O.....2i...z....-5vH..2..d..mJ..m..................Bvo..gs']...o......f......bUN^3..Y.k..!RA&..&.o......v.....&......?.~......sQOD{...#...5.5.&....^..z~UUUUq.........W..=...........UUED.EEUUTEET.....U.+b.....Zk.5..c...*.....0P.,d.E.?......&..!.4.....".-.....0......'-Q&...d...X1bQ....9.Q..b.$.b...q.b5`...B&.t....;_wf...o@...P.3.y..5x....$;..o..l.W.....I.xS...

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	13101
Entropy (8bit):	7.954247990439634
Encrypted:	false
SSDEEP:	192:hvrBbzq4rrfnF3KZkI6GfNe1Uiyscsa6pvJ4eLZxy6G/Gstz5KJV6qUG31Ko5hXx:prg4XQx6YdF6N2AxyfqUPkhXMEKo
MD5:	294F049EC1A02C8B0EF3FBBD7A803B34
SHA1:	6945C7BE30C1F964A28D35AC584BFA4181AC1913
SHA-256:	A2DD0CF90A81572782CA8F1E5C3E88A5046FCD1D9067EE79516FD928C4ECF8C7
SHA-512:	49ACA364249DB884F2994C9B9EFA3D291012A1F50235AB5129B32B4BAA95C5F47F9D9416E247772A1B6B8585A8B5852B2DD5525315AFE5EC6800A25DBAE00002
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/vt?pb=!1m5!1m4!1i15!2i30305!3i18995!4i256!2m3!1e0!2sm!3i690435429!3m17!2sen-US!3sUS!5e18!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!12m4!1e26!2m2!1sstyles!2zcy50OjMzfHMuZTpsfHAudjpvZmY!4e0&client=gme-weeblyinc1&token=34170
Preview:	.PNG........IHDR.............k.XT....pHYs.................PLTE..........................................puz.........y~..............................................Q.i.................NRV'.Ej....5.Q.......8......C.]ehlZ]a......"...R....o..8.........................J.......\......g...]..x...4.S..=.Z> .G..1.IDATx...g.....(+.L&..s.I....g......u$.......Z.t7Ap..T>U...<.U.-)...m..S.wi.e"Aj.K.^.$1..).<W.......\.b.p)I...]ds...C@.2.....$.a.j.d.^.....]...n.K.....5.d..QW..S)..#..r'.....:7. .-.%.....6......R...\8.......:(.s:r<.U]../.1.b.zwId\ ....Y...9.#t=.l..J..sTI...!...6+..;cv..L...7@..a.wO.>.........0.`$..^O..h..H+...f.SH..$..l.I..0A.!..22.8cT.x.\..2$P..t.K.%zC......C./i&.x.@Or....(.m..I.A)piI.W....!....h&V2....s...@..3.]..x.z..`..;..l.K..0..]............]=.<b$JbqPV.FC....b.m..m.2#...... ....g.....=.......m.9..d.r...{....#.fz.h.]py.....'..5..+..0(...d.(.a...t.Kuf..!.....*.....'U....?.J.....R..Ko+.v1.o..z...J.PQ...+...ehd_.l..?.I=3........

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9924
Category:	dropped
Size (bytes):	3889
Entropy (8bit):	7.9482584056737045
Encrypted:	false
SSDEEP:	96:N0EmaBIyVl/P5Z5+sk2MPYCVxqAsp2ZljEoxqgyB11MkJu:NMaBICRxZoszAqLp2lpxqvXu
MD5:	C837A388B8A10D82F2B913EAB8400B54
SHA1:	19886C9625EEF3B0DA43CA84016A3A132282B8BD
SHA-256:	59CD2AFE319D07B0F53349CA9C82C6E8186BAF1241EC13A2AB0AB0ABA888E3A4
SHA-512:	8493A47F98E66C8E85B8C72FC4C8D4C1733B454E7956C5BED9604C8E8D312A225603AD870C3CCD7C83585F458E9195EC684E83BE5B0E3960153B0AC16BCB2B35
Malicious:	false
Reputation:	low
Preview:	..........eZ=......+.N..x.4.]:..d..G.\.2O$.hJ%Q.~..k...s.....F7......~.}z.....}\|......(O..^...._.Ons.F7~......O_~........_~.~.....\|...o......w.{..O?~...?.?..._..=.....'v...?.........?_.....S_.....[){..n.^..j.G.{km+{H...........e...<..s..=..y......3h.(..S.l..=........m...;.<.9H.w......b+.....]..[.{qN ..........D:.z.)iB.....L....~....X..6H.......Gk}Xg.S..]...x...n..rs[(;.z.?i.%nno.L@B.....#.^.[.]...w.P.PK:..%.\(.(.(^...t.....G.{v...9@...pR\|3t...s,....S..%..\#n.p....q.uf...g2C.A...\. +%.!Gj.......-a..a...$S...I2..R...d...8Y........<.}.yL. .}.z..[..CN..K.......H..jk0.....v..&.\|.sq..K..0.1R.X..Fy.%..c....7st2.(..,..zM....B.'...nSynO...TR...xT0u..U..c..Z.......`.pAd(.B.\:$..n.F.....gX...@%...M..>.U...%.0...T...'.....E..fo.w9.5..u.Xl.h..[.....y.P.........+qG....v2..p..n4.y.E<Cuk.&..\8...pl:..K...........;..&...l...X"..Wy.C..c;..=..+.........Yt...1..tl._OZ.v.xS...F...VX....)........j..p.'.c.....9..'....^1....b........F=..O...]...$K@

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6677)
Category:	downloaded
Size (bytes):	260628
Entropy (8bit):	5.418166723032892
Encrypted:	false
SSDEEP:	6144:zNgCkEwgbgzJfL+RVMHNgYCsGsRtGfXTwdeyttdqGhl/IMlbK7igZ:zNBkEw+gzJfLeVM2YyfXTwdeStdqGhlO
MD5:	0AC90C644D29FBA8C994FE94048D8F0F
SHA1:	61397B721BAF4D7ECCF7C9EE031049AB0C120632
SHA-256:	634485B4948D43183D2A03442B71174F94B8175557FEA54CBC5F12C269CAFE9D
SHA-512:	2E16901F19E1E96B649699483947C99A81681EA995806352A9132D3A127108475311D8C0268394590A143BC0D008E81D13C878BDFC3E8E1EE6FE637A3A6FF8B6
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/55/11a/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Cda,Dda,Fda,Hda,Ida,Jda,ns,As,Es,Nda,Oda,at,dt,bt,Pda,et,Qda,ft,it,kt,mt,qt,Sda,Tda,Vda,Xda,zt,Uda,Zda,$da,aea,bea,St,Yt,$t,du,gu,pu,dea,Yu,hv,jv,iv,iea,Cv,jea,Fv,Gv,Hv,Kv,Qv,Tv,Rv,Vv,lea,Wv,mea,Zv,ew,qea,gw,hw,rea,jw,kw,lw,pw,rw,qw,tw,sw,mw,uw,Cw,vea,Ew,Gw,Jw,Nw,oy,Wea,Yea,Zea,gz,Cz,ufa,xfa,vfa,Vz,Afa,iA,Efa,Ffa,kA,sA,tA,uA,Gfa,vA,wA,xA,Eda,Gda,Ky,Ly,Hfa,Xea,Jy,Ny,Kda,Lda,$ea,Mda,Ifa,Et,Wda,Mfa,Nfa,DA,Ofa,GA,Ay,yv,Pfa,Qfa,Rfa,tt,ut,Sfa,gfa,tfa,rfa,Qt,Tfa,cea,hu;._.Ur=function(a,b){return _.aa[a]=b};Cda=function(a,b){return _.Jd(b)};.Dda=function(a){return JSON.stringify(a,function(b,c){switch(typeof c){case "boolean":case "string":case "undefined":return c;case "number":return isNaN(c)\|\|Infinity===c\|\|-Infinity===c?String(c):c;case "object":if(Array.isArray(c)){b=c.length;var d=c[b-1];if(_.Pg(d)){b--;const e=!_.ah(c);let f=0;for(const [g,h]of Object.entries(d)){d=g;const l=h;if(null!=l){f++;if(e)break;l instanceof _.fh&&l.Fg(c,+d)}}if(f

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6078)
Category:	downloaded
Size (bytes):	26972
Entropy (8bit):	5.5843559963625715
Encrypted:	false
SSDEEP:	384:3gUEJ3tcuZS/1VdiY2ryvrTrnFjWodypymb56Qssfzqm2iCmt84:3gUgtcK8VdfHTaymb56QfODiCu
MD5:	1225FD353A78472433DF9D81CB0F37EE
SHA1:	C36960DCEC828402885023F8320A5A18A3B19272
SHA-256:	2E7439E6DC90389F0F4396E7EADB06A23FEB13A26D7D7FDEE868341913200BA2
SHA-512:	C326DD16C4F35A2B9828F7148E967FE2B1EE521F3651B47914FCCD5D4FC0302B1428960CF429DED571636EFE86D058CE7746B1C936F22BDA45FDE7F8BC6BE1FF
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yV/r/TQ5rYX3IGJd.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometHovercardQueryRendererQuery$Parameters",[],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:"7343067725813853",metadata:{},name:"CometHovercardQueryRendererQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("HovercardInteractionPreference",["$InternalEnum"],(function(a,b,c,d,e,f){a=b("$InternalEnum")({DISABLED:1,ENABLED_ON_HOVER:2,ENABLED_ON_CLICK:3});c=a;f["default"]=c}),66);.__d("CometHovercardSettingsContext",["emptyFunction","react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({hovercardInteractionPreference:2,setHovercardInteractionPreference:c("emptyFunction")});g["default"]=b}),98);.__d("BaseHovercardTriggerWrapper.react",["react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("react"),k={displayInlineBlock:{display:"x1rg5ohu",$$css:!0}};function a(a){var b=a.display;a=babelHelpers.objectWithoutPropertiesLoose(a,["display"]);return b==="inline"?j.jsx("

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	224382
Entropy (8bit):	5.543884703841395
Encrypted:	false
SSDEEP:	3072:6QWQaf5qZ3fhO+ACcE8rG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMxwqpL:cQX5NAZYLceF+v9TnXP9RIMlZ
MD5:	267F2D8F991D7B280F9BAEC6547BCA6D
SHA1:	90FE5326289FCA54D9BB848C7CF2D081E439711D
SHA-256:	C8682D8C23C58B42CE3CBA71F1CA764E4F3AB389DFEC2BC73DFC854CC64ACBD3
SHA-512:	0CE825558685DEBBF156FDB28BFDF73BEBB492146DD2EF09F44CCE03FBEA8921B996618946980A48D0FE7AB66EB77B919965B26DB44B0B8995B3A57905860223
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-630646945&l=martechJsDataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":2,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regio

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x565, components 3
Category:	downloaded
Size (bytes):	47105
Entropy (8bit):	7.927556455689492
Encrypted:	false
SSDEEP:	768:fjSlhPNf7jesBSqXuZFocIj2vw2Rl9QcXcHJ/Fqu9GQkc23itRt6dPX2/E3+Ko:fjghPVO/yLj2oFcXcp/FqSFf2ymQEq
MD5:	52CE31BB4E1610BD5352D781D979FC9F
SHA1:	D662727A320BF10E16A9BEE10D4CEC9729FF42B6
SHA-256:	4FBEDC936F8EED9350BC7EA19AEBC3EA8661601A2DED15990A410F6E8DED028C
SHA-512:	F99C0C1CE23EC0A5FCE0B7728205B9D2D32E0D56407E824B6E36B310F8BE0D7CAA1DEE2BE7B9C14D1950F3B3FEF888EB7A0CA9AE878D85B877A230947DAE8AD9
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-2.jpg
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.............................................................&""&0-0>>T............................................) .. )/'%'/9339GDG]]}......5...............7....................................................................S...........................................................),C.3.........p...h..e..;Mc..207...eD..,.p.<...&K.K=\|....s.."..ST.:..x.134......1+...4......+..B...r`W..`.9..p\|.J...y..t..W...+G...M...XM

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7090
Category:	downloaded
Size (bytes):	1905
Entropy (8bit):	7.883787841310523
Encrypted:	false
SSDEEP:	48:Xw3SBSClsSfpTrth0WXshqa6zinAyPycQ/PM731vsg7t2X0:g3hSfrOthAzinAynQ36FvsghH
MD5:	B661193D66E65C5668A2EE4224646A0C
SHA1:	CD23EA1170B055810A56C52A73375EED64BC2E06
SHA-256:	D82AA8C4E8A2D96E6163A0300995C14C80E72020041B829E0365A9D9FC89CE71
SHA-512:	80F44166F80B6044DDC5A2014198939E5FC938B3707D8F733978FE3D48F6209829005B7274BA9419ABE4EDA19F36F66DBB33AF4BF554E28E6B6F68ECEE9222D9
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/custom.js
Preview:	...........Xm..6..\|.+X.....v[ . ..h7M. .........6.JT%.^7...HY.....5..lq.g.>.?WPl.E..Z.,...g.?g.X.]...k.bf~......../.b.D..Xs...5.K.=M.....y.".z..7JcU..T{=.J...%.7..r...Y.......a.>...x..o%>f.up.:B.X./......Y.c K.Iq....8sy..?....wS...d....V..v..2v..$dK..(M...D&b^.J..e...;.BC..LHB.$J@.x.J.2...:.\....$ 5.Q.^.....dU..........D..ew.....9p..".,Q.I...F......Y..L.5....r9...L...){..S...q5....k........2(.d..J.-.$.s.l}.n..J^....RK......Ss!..g..T..^.....?...Iw. ..Xc.^..WR..l..Z-.......<K .zR..=../.b}....7..).....>\.X........6N.5.\2/..v.Y_.![m.N.....fv.\|......9...N.yx.W8..o...su5..4..........A......L_.YY...%....UL.}Y#9.b..%......+..os....e..MWg}S..J.;......k..,4&..\|C.H.. v......0S......)...b...9..t..u:...<^.y.5.e.5v..C%..jfel...h..p.C+..G..g.e(.U.U....u>..Z...q.@...(f<&.^&E.WD%........r..G.......Qzt.....H719&.fI..}.[N#......[......v.{.....q.X:...of.FK...L....?9....\?.m.(.Xr.R.(.....$A.eM..S0<..ul...J.%5..z...{.L$RL.wf9.....>.\.z%J,.J..,......~:.q..

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	938
Entropy (8bit):	5.468118875446559
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WdcfMpNrl/nzsSMLZYysSVJyNxL8BMUNbp1:si2N1V4NxwZG1idD/QdAaywBfVcV8gY
MD5:	4E90537065CE64BD93F268053B6E5E80
SHA1:	07F0127FBEA339D1073D4FAB1174F2F09F9A3B8B
SHA-256:	7577AD890B50E394DDC0B2BA51525031E1D6B4902539D22E1DC9829B651C70A1
SHA-512:	7E1EA7FC6350ADDD1AF3468382A306E0FC6A8A2F2579D072887AE8D3EC99EE43E2272B2A3032909AC24CF052FA340ADFEFEF23FBEDFF072535CE5B0DC429E7A1
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=bdad84d7-0c54-4f11-9820-187176aaa48f&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://api.squareup.com/1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=Signup&v=Visited%20Onboarding&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047148981
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20303)
Category:	dropped
Size (bytes):	547361
Entropy (8bit):	5.431026201247079
Encrypted:	false
SSDEEP:	6144:+YS2IJf6PwG/wl4WbJLPGMZjC7W86QExWydtwv9bR/h5nFDuTU86x:+YGGoo6QExWyaRDuTU86x
MD5:	3DDA8DA4DFE9273BA481AE622BC4E882
SHA1:	A9EE62A4678E7344B3BC8589A37DBFBFB63C46EF
SHA-256:	0895FF026A043DD592056EAC47C4F27DDEE5621D9BF68B3992948B6753F28777
SHA-512:	C6DCBD2DE809341D34101D772D655BE1677F91E94FAF7F10CDB93BD011E2C93248B78DC148891D056723C29362D4F2D461AC75E1B00EEC71506D3E34B7785040
Malicious:	false
Reputation:	low
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11231)
Category:	downloaded
Size (bytes):	21721
Entropy (8bit):	4.788111939848617
Encrypted:	false
SSDEEP:	384:+28C0pGoFvlC2MGAVsqlXaivSYBQY2YpuMc:UZN
MD5:	5DCC6595E01C3C63B69F991366B1C7D9
SHA1:	5CCDD7E36F0F99FDB215CA9FAE7EF1A41CED8A90
SHA-256:	930239150E702D9D4BF43C3881AA70F8AD5FD9068DCBECB7C8BCCA654784F7F1
SHA-512:	475850913930ADC9C8E9FE6BEC23609D7DDB11DEA4018FE6EFAC084F7B366D457705FAA4AFAA9B4CD1277128B411C35835C52A9E3EA7FA3D4793F4BEE79701B1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202301.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-foo

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1305)
Category:	downloaded
Size (bytes):	46274
Entropy (8bit):	5.48786904450865
Encrypted:	false
SSDEEP:	768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m
MD5:	E9372F0EBBCF71F851E3D321EF2A8E5A
SHA1:	2C7D19D1AF7D97085C977D1B69DCB8B84483D87C
SHA-256:	1259EA99BD76596239BFD3102C679EB0A5052578DC526B0452F4D42F8BCDD45F
SHA-512:	C3A1C74AC968FC2FA366D9C25442162773DB9AF1289ADFB165FC71E7750A7E62BD22F424F241730F3C2427AFFF8A540C214B3B97219A360A231D4875E6DDEE6F
Malicious:	false
Reputation:	low
URL:	https://ssl.google-analytics.com/ga.js
Preview:	(function(){var E;var g=window,n=document,p=function(a){var b=g._gaUserPrefs;if(b&&b.ioo&&b.ioo()\|\|a&&!0===g["ga-disable-"+a])return!0;try{var c=g.external;if(c&&c._gaUserPrefs&&"oo"==c._gaUserPrefs)return!0}catch(f){}a=[];b=n.cookie.split(";");c=/^\sAMP_TOKEN=\s(.?)\s$/;for(var d=0;d<b.length;d++){var e=b[d].match(c);e&&a.push(e[1])}for(b=0;b<a.length;b++)if("$OPT_OUT"==decodeURIComponent(a[b]))return!0;return!1};var q=function(a){return encodeURIComponent?encodeURIComponent(a).replace(/$/g,"%28").replace(/$/g,"%29"):a},r=/^(www\.)?google(\.com?)?(\.[a-z]{2})?$/,u=/(^\|\.)doubleclick\.net$/i;function Aa(a,b){switch(b){case 0:return""+a;case 1:return 1a;case 2:return!!a;case 3:return 1E3a}return a}function Ba(a){return"function"==typeof a}function Ca(a){return void 0!=a&&-1<(a.constructor+"").indexOf("String")}function F(a,b){return void 0==a\|\|"-"==a&&!b\|\|""==a}function Da(a){if(!a\|\|""==a)return"";for(;a&&-1<" \n\r\t".indexOf(a.charAt(0));)a=a.substring(1);for(;a&&-1<" \n\r\t".i

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 31868
Category:	downloaded
Size (bytes):	8007
Entropy (8bit):	7.9762040246938195
Encrypted:	false
SSDEEP:	192:j1qQTYQrJPsfK+sJNwrQ+rtNJOA4/oDQUTXxOSaAjr:hqmDPsyD6xNSW5XxQAjr
MD5:	114CB013067A00BE499CC6D9173EC431
SHA1:	6E3F7D1796059CDC3850E9723F0D8A453DCE4E02
SHA-256:	A73F1C74691BC4122DFD5262F5ED0B27DD077C71B790140EC23C2F6732A454BA
SHA-512:	7AC24392DA13A179957AF495C966E0419D83F62731370EFAA92FC3323B8705D1A41AF4921052D3D8E9A604CCBC0F0CA9CACA564B0EAC2E9EE7D13EA2F06AB5C1
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/
Preview:	...........=.w.8.?'......V....qb..I....&...=?Z.m5...RRo.........t...2..-..A....D.~::=....L......_..d.1G....2j...^`.6...[\|D.F..s6.#...X.C...m..T.:`{5.ro..J<.......;.q+`C..F.......uPj...X.':.A.L.........p.eH....6..e.6....ay..P...B.\|w..Y.U...S.L....j777U.0.....;...z.KM^k..Vm....[..Nm.Q..i.._..f....t...b....-.2..v(P)\(S...f.%9Wl~..&O..).C.%.F.}..\Ade.4K."..Z..E5..e.=_..5.hSD".+.kh]..CI`.r.'>`...>.L}.A..+;..H.-v.~.jzc..t`2.nE<...X.E..7....j.<.......%.Fh...W.2.....rV.....g.@....1...z....FO}6.h..a:.3.`6G$(2.P..^._/F.e...P..n.[..vS2G...\...c.G.7....w...\|O.+X....R....s. ._.!.....-...@...:.\....vh..... ...>.I .k.1...N\wb3.Y<..1.Y.\|p......z........\|....p.2i..;e.Y.ru1.=....Gc..N.[.g.O...Gu..'....7..m...............%..1..1.k..>.M.@....{d.....Aed..U.(..G.N.....c.U...M.F.....,+..\...Zo.....Ag...&...Z&.n.lD..Q.Tz..k"-.#...'..`.........-4$......k........V.\|Z.>L.?...3....M....psp......T........I.t>mY..6s..=.w.z.L.+..dn...dj.m.8.I...A.....B.G.RE.@D.h.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 16132
Category:	downloaded
Size (bytes):	4703
Entropy (8bit):	7.960774890775469
Encrypted:	false
SSDEEP:	96:NUl5XgbFPIAJnQiJMXmE7AjNdMH8OLuH8A+pdbsD6tNDU:NxyApQiJ6kJdA8OLucA+XAGthU
MD5:	D9B903E9BE61E2E18511BEC0A1EE0090
SHA1:	ECACF6BE8DD2D0D4056A9B9E63414616947A3F8C
SHA-256:	E964C02B1C22D8E3F3C458AFEA638D80EA9AFE436B0DCDAF22BD710A28C1B16B
SHA-512:	17C2AD1C9018A1C7AB17D9EC6AF78EF58FBC822E7E9A304CD76C36082AF275DF6F45D0A3ADB7BDD976041A531ADEAE410C1A9890E277DE8ACCFF59AB8DB5A1A7
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/files/theme/mobile.js
Preview:	............ks...3.+.S..IQ.4.m...4..k......"l....h5...>...4.N..%...n.....R.;.T..?>}...?...q.R....6.I.\.../6e....G...pp.T.....g..<..O..r.=.....?_.z.W7.O........7..........7....p...O..:........Z...IQK.../.m^.....z....V.t.....`..:...L....MQ0.....-4.T5..:..e3]%M.....u.}._/U)..F..H\|/.j#.)/$F...]"...%o...^&M...D^.m^fj+~.;..NN.U).....F{iZ.r.j..e.Ox=.W@.UsWHx...C...m.....z.a.4....k....p............F.g.HDZ.@wR.9J..i.?..Y......N<TB......I../e.X..p..J......d...pj.Y.e%..h.R.j...z1.;3.H.H."M.b.....d..B;U.j..d#k......."/e....B.d..:..U$5.T.y.c......B....?......3....~.......r.!o.J...7\|...-.U...`_.N.....].+8...kNET..I..F..D1.......O......b.G.%.<.w00..}.GL.>:w.tID.:.....x.'.T._@.....Ug....&/r.oV.'s.U.D...4..e....R+..7..7..{f...9..g..w..]...:7 .#u..k)..8.M..Ec.g...9i..$q.:'......-.`.A..4..m...A4D...'....xH5...8.C....._.(..In.t...V),....RU6y....x.?......X.Q.a.TSL....c1c....#.t\|..<5...e...>.#h.....X.J.E......Rm.....<.7.x..@Olx...(.L`f..~..d.`........._..*U.,..3.\,P

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2763), with no line terminators
Category:	downloaded
Size (bytes):	2763
Entropy (8bit):	5.535002316718323
Encrypted:	false
SSDEEP:	48:nzi6iflTqHiwyboBsptGtPUMVp2om4wZFCm3+tzah5IEuNiRB4SNyuVoGDPA:nu6idwin7uc0hm4kxOtH/iRhBo4PA
MD5:	A2A4D85F4226524B99FE228AA613FAB4
SHA1:	A85D91118AA1E9547997E86067BC656AF11DC5BA
SHA-256:	E427C3ECFBE60D9922C7F76BAED2CD86DB84686A32E174F15A86CC740F72BAA5
SHA-512:	A00313647A68FA9896E4395DE95D2277B44A58BAB1891ABFAB9BB20378B4900C14B5EBC86436207CC9015B89EFFD94E7B535A7D6A76711F5A0204BAB44802426
Malicious:	false
Reputation:	low
URL:	https://trc.taboola.com/1543392/trc/3/json?tim=1714104727172&data=%7B%22id%22%3A579%2C%22ii%22%3A%22%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1714104727158%2C%22cv%22%3A%2220240421-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquareup-sccnx%3Aabp%3D1%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22item-url%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22tim%22%3A1714104727170%2C%22ref%22%3Anull%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"b609f5ea18e8cea33474ac7683626e0c","sd":"v2_b609f5ea18e8cea33474ac7683626e0c_9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a_1714104730_1714104730_CNawjgYQ4JleGPbs6cTxMSABKAEw4QE4kaQOQPG-Dkivy9kDUJAEWABgAGiQgI6I5eeGxhBwAQ","ui":"9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a","plc":"DESK","wi":"6728209840704231208","cc":"US","route":"US:CH:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"t":"abp-mode","uvpw":"1","pi":"1543392","cpb":"EhIyMDI0MDQyMS00LVJFTEVBU0UYASCc__________8BKhljaC50YWJvb2xhc3luZGljYXRpb24uY29tMg90cmMtdHJhY2tpbmc4MDk4gLCGtAZAkaQOSPG-DlCvy9kDWJAEYwjQNxCfTxgwZGMIt10QzHoYMmRjCNcWENUfGCNkYwjSAxDgBhgIZGMIlhQQmBwYGGRjCO8DEIsHGAlkYwiWWBCWdBgLZGMIpGEQ934YPWRjCIBVELJwGD5kYwikJxCDNRgvZGMI4f__________ARDh__________8BGB9keAGAAeIjiAHLmZDSAZABGJgBsYfqxPEx2wEQAdwB","evh":"134302489","evi":{"48":"7120\|10143","50":"11959\|15692","61":"12452\|16247","62":"10880\|14386","47":"5028\|6787"},"vl":[{"ri":"1ebb745cc91c833

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 1000x277, components 1
Category:	downloaded
Size (bytes):	55570
Entropy (8bit):	7.959165038003349
Encrypted:	false
SSDEEP:	1536:98Yjv/mZELYvGnWrguwZrhS9qyLFKXFHvSq6:9/v/WvGn2wzS9fFKX5l6
MD5:	1E5EF37145287E5BEF6885CCBCB1C804
SHA1:	E9263284D718ED35887A88747E97514BCB88A412
SHA-256:	B6644AE3A5ACE38A42F8EDC5DA0AEF541B884A712A12F79F378C18917F8EFBB6
SHA-512:	FC43A2EA3AC69F48E20F914F95C8A8F47711C89CA3D83CEC136736D3E94EA3EECBE61F38DF0D388CDA5DCC78779D2C372288DC0AE2A1ADA9278CE07844D360C6
Malicious:	false
Reputation:	low
URL:	http://www.painrehabilitation.com.au/uploads/1/0/3/6/10363185/background-images/575468987.jpg
Preview:	......JFIF.....&.&.....C.................................................................................................................P..........................!.1.AQa."q..2..#B..R.....$3br..CS...4..Ds..%5ETct...........?..S..(..(..(..(..(..(..(..(..(...E....{...].O.6sY.b.....I....4.HH. .z...F..Jw...d.(..(..(..(..(...k.9..]sny...w../a?7..q....J[..\....]..g.....e.@.....=.i.S..mjZ...S.n..RU.R.].#'..f.....SA....1'...H....R<..1..C..g.k.x...`]..X..J.5..)...K.^P.....E..l7..'..Tl.S......B...@..?Z.N.........H.,\|$.9.$..R..Sg...2.!...3.A..t..y.'.....iZu.Q.e>0Z\.......b^.B..:.(g.3^...jah.......x&./..7.d..y)..;...y...P.)...i..8.IoR..%"Z..{..;T..Y..+.!B..z....jTnTR... .k>..m..a-..I......Cvt..X..q`W..#c...Y.,vh.<..5..i.;O......s..F.J.C(<.....h.\|B<1...k<...M1!R...7....@.K2..sP...P..-..=.R....R.W.C....Js]mN.!_..x3v...*'.g<.......#-.Q.....c....-.;.V.LtDH....gx....+.O...]....xD......SE.O".@Jr}MO...C.H8......R.r.{.I..4..q6.7.v..4...W.w{.)....]#.T].]..U.'.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1257
Entropy (8bit):	6.674703615014842
Encrypted:	false
SSDEEP:	24:Ci1he91Wwjx82lY2T3o5Vhb4VY/4Vb2yJ3Vx34Vh7kQ4V/G0PG8MPR7XUW1N:CgqQNn2qrojBJ3bsWN/RDMWY
MD5:	E8E61D02C59CA3F3CC4ECBF78491CC8F
SHA1:	3DB15331AAAA18CF68DCDFC2A41A569AA4644F5C
SHA-256:	695F86E322E77356CDC369934228828DDC66FCD307AB442478CD01F0E2CA2A2A
SHA-512:	155F2EBD59BF529A41312B274BFEB8FF6201B45E1E09E5F7BC3DAE0B597AE30165E4DA658B9FD7F391F4CB1CA6179CC9D4A27D9E583C79912312CAA4A509525F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B.........9.......tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:1EE4ECE2FA5211E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:1EE4ECE3FA5211E3AF9CED45AAAABCCD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:258E7E63FA2011E3AF9CED45AAAABCCD" stRef:documentID="xmp.did:258E7E64FA2011E3AF9CED45AAAABCCD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...(...[IDATx.b...?..g.3P.0Bi..............8........3R.\....ccc....XZ;...a.0.%E...F..q5...q!...;...H...%@....

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 171040
Category:	downloaded
Size (bytes):	39208
Entropy (8bit):	7.992909697362399
Encrypted:	true
SSDEEP:	768:6ZZE0xIDXVMF8ZibmorO49j49Y27f2h2vrYkvJyuraVD3DnCM:tUeMYKgbYqrLYuU//
MD5:	8B4232FBC8CE2AF8BCD26EABBEEED4ED
SHA1:	587B26921B69B604DFFA8134B538FA77BF189A00
SHA-256:	ECBDEB24019DAAB05BB574F7E35528EA2E3E55FB4E1717E8368E99E9C537E129
SHA-512:	3C4D240278ED48C5E080B9BEA482CFD40729B9B905E5B9751BBCC9D2EAC9EF2308DCBC2F5F9F24967BE6343B6F2D8883FA2D2AB0F4488B9D7981DA18D7D027BB
Malicious:	false
Reputation:	low
URL:	https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/onboard-frontend-app.css
Preview:	...............0.W.n./.D..G....>.}....I.@ .....qH...dV..v.................).=:.x........o...b......]S.wC...e......5.iT.......<....i.&..M&.x:E.......p~..t...)....Oq=..A...V......^.h.Tf3.....y.Wa>.R.!.!...GCi..\|........(G%....h...~......w..Z..!?...;.....:.a._...8...p3_...._.......R.a.ub.........>._..O..._+.Tqn......K..n......x... ..R(X8}.X...W.......!...._+.. ../...._..V;_...._.....9 .+%.F......_0..J,...5/<)....P.....q..KY....p..u..@>8.._). B_'...~...!.......H...7.<.$.0%A_.S.....46.6QY...+.....O~.7.F\..5x.........0N..?...)".8}.x.L..O@ A.I...&.H])O....$A&`..1...r...y&.t..jkN.?...<9D.$..i.UT.....p.J...+......a.q....^g.f;...=\|.94...s`...Yk&s....FT?..&.y..F.....F.....w]...m ...DH.m........ t.N".1PF.6bt.g$.+y.(.....l6.>...\U.....2......~m48...'....Q..7ww.8^...G`..........q....8...b..z..=.J..... ..l.)..</jZ@q..2..)nr.F......4NR..j@aa..S..p.<..l...X..............N..C..b...n..1.w@..o......d.i..UI.X......."......B...UV41*.t..."...

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 06:10:46.423707008 CEST	192.168.2.4	1.1.1.1	0xac7	Standard query (0)	www.painrehabilitation.com.au	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:46.424027920 CEST	192.168.2.4	1.1.1.1	0xea01	Standard query (0)	www.painrehabilitation.com.au	65	IN (0x0001)	false
Apr 26, 2024 06:10:47.341896057 CEST	192.168.2.4	1.1.1.1	0x2a02	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:47.342056990 CEST	192.168.2.4	1.1.1.1	0xb32	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:48.927517891 CEST	192.168.2.4	1.1.1.1	0x3999	Standard query (0)	www.painrehabilitation.com.au	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:48.927781105 CEST	192.168.2.4	1.1.1.1	0x46b1	Standard query (0)	www.painrehabilitation.com.au	65	IN (0x0001)	false
Apr 26, 2024 06:10:48.937720060 CEST	192.168.2.4	1.1.1.1	0x4edc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:48.938188076 CEST	192.168.2.4	1.1.1.1	0xd80a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:49.577825069 CEST	192.168.2.4	1.1.1.1	0xf536	Standard query (0)	www.weebly.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.578600883 CEST	192.168.2.4	1.1.1.1	0x4480	Standard query (0)	www.weebly.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:49.636471033 CEST	192.168.2.4	1.1.1.1	0x1d73	Standard query (0)	cdn2.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.639062881 CEST	192.168.2.4	1.1.1.1	0x6921	Standard query (0)	cdn2.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:50.497895002 CEST	192.168.2.4	1.1.1.1	0xf75a	Standard query (0)	www.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:50.498466015 CEST	192.168.2.4	1.1.1.1	0x42eb	Standard query (0)	www.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:51.020734072 CEST	192.168.2.4	1.1.1.1	0x94d	Standard query (0)	www.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.022505045 CEST	192.168.2.4	1.1.1.1	0xe1a9	Standard query (0)	www.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:51.658945084 CEST	192.168.2.4	1.1.1.1	0x3241	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.659421921 CEST	192.168.2.4	1.1.1.1	0x609e	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:53.304194927 CEST	192.168.2.4	1.1.1.1	0xad51	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:53.304621935 CEST	192.168.2.4	1.1.1.1	0x81f6	Standard query (0)	ec.editmysite.com	65	IN (0x0001)	false
Apr 26, 2024 06:10:54.317713022 CEST	192.168.2.4	1.1.1.1	0x44a1	Standard query (0)	ec.editmysite.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.244334936 CEST	192.168.2.4	1.1.1.1	0x6a2f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.244499922 CEST	192.168.2.4	1.1.1.1	0x66cf	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:26.247353077 CEST	192.168.2.4	1.1.1.1	0x4e9f	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.247353077 CEST	192.168.2.4	1.1.1.1	0x61b7	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:26.690963984 CEST	192.168.2.4	1.1.1.1	0x136b	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.691143990 CEST	192.168.2.4	1.1.1.1	0xd259	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:26.738604069 CEST	192.168.2.4	1.1.1.1	0x9c34	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.738750935 CEST	192.168.2.4	1.1.1.1	0x1c31	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:28.275469065 CEST	192.168.2.4	1.1.1.1	0xf57e	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:28.275469065 CEST	192.168.2.4	1.1.1.1	0x4cd8	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:29.781155109 CEST	192.168.2.4	1.1.1.1	0x7502	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:29.781451941 CEST	192.168.2.4	1.1.1.1	0x2b96	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:30.204829931 CEST	192.168.2.4	1.1.1.1	0x5db6	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:30.205048084 CEST	192.168.2.4	1.1.1.1	0x60ce	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:30.364151001 CEST	192.168.2.4	1.1.1.1	0x9291	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:30.364584923 CEST	192.168.2.4	1.1.1.1	0x9f73	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:30.877378941 CEST	192.168.2.4	1.1.1.1	0xe6e0	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:30.877840042 CEST	192.168.2.4	1.1.1.1	0xb328	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:31.139771938 CEST	192.168.2.4	1.1.1.1	0x3540	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:31.140193939 CEST	192.168.2.4	1.1.1.1	0xd5b3	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:31.446537971 CEST	192.168.2.4	1.1.1.1	0x6cc6	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:31.446688890 CEST	192.168.2.4	1.1.1.1	0x28e8	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:32.027036905 CEST	192.168.2.4	1.1.1.1	0xb46	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.027188063 CEST	192.168.2.4	1.1.1.1	0xa44a	Standard query (0)	twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:32.126868010 CEST	192.168.2.4	1.1.1.1	0xa561	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.127541065 CEST	192.168.2.4	1.1.1.1	0x5bdb	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:32.754452944 CEST	192.168.2.4	1.1.1.1	0x1404	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.755229950 CEST	192.168.2.4	1.1.1.1	0x7c06	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:36.223484039 CEST	192.168.2.4	1.1.1.1	0xdb64	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:36.223710060 CEST	192.168.2.4	1.1.1.1	0x3908	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:36.488253117 CEST	192.168.2.4	1.1.1.1	0x8795	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:36.488645077 CEST	192.168.2.4	1.1.1.1	0x822c	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:37.247706890 CEST	192.168.2.4	1.1.1.1	0xd835	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:37.247863054 CEST	192.168.2.4	1.1.1.1	0x95a3	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:40.028640032 CEST	192.168.2.4	1.1.1.1	0xc7a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:40.029232979 CEST	192.168.2.4	1.1.1.1	0xee48	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:48.997945070 CEST	192.168.2.4	1.1.1.1	0x734a	Standard query (0)	www.weebly.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:48.998281002 CEST	192.168.2.4	1.1.1.1	0xf27	Standard query (0)	www.weebly.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:50.209911108 CEST	192.168.2.4	1.1.1.1	0xc8de	Standard query (0)	squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:50.210424900 CEST	192.168.2.4	1.1.1.1	0xdad1	Standard query (0)	squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:53.094769955 CEST	192.168.2.4	1.1.1.1	0x29f5	Standard query (0)	square-fonts-production-f.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.095021009 CEST	192.168.2.4	1.1.1.1	0x48e	Standard query (0)	square-fonts-production-f.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:53.095767975 CEST	192.168.2.4	1.1.1.1	0x274d	Standard query (0)	onboardfrontend-production-c.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:53.095767975 CEST	192.168.2.4	1.1.1.1	0x82ab	Standard query (0)	onboardfrontend-production-c.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.097876072 CEST	192.168.2.4	1.1.1.1	0x5789	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.098110914 CEST	192.168.2.4	1.1.1.1	0xcaad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:55.537575006 CEST	192.168.2.4	1.1.1.1	0x11ad	Standard query (0)	o160250.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.537753105 CEST	192.168.2.4	1.1.1.1	0x12ce	Standard query (0)	o160250.ingest.sentry.io	65	IN (0x0001)	false
Apr 26, 2024 06:11:55.840972900 CEST	192.168.2.4	1.1.1.1	0x236	Standard query (0)	martech-production-c.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.841121912 CEST	192.168.2.4	1.1.1.1	0x1943	Standard query (0)	martech-production-c.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:55.841722012 CEST	192.168.2.4	1.1.1.1	0x22e5	Standard query (0)	cdn-pci.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.841973066 CEST	192.168.2.4	1.1.1.1	0xb493	Standard query (0)	cdn-pci.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:55.912873030 CEST	192.168.2.4	1.1.1.1	0x2e0a	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.913022041 CEST	192.168.2.4	1.1.1.1	0xf325	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:56.472507000 CEST	192.168.2.4	1.1.1.1	0x7c9c	Standard query (0)	o160250.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.472969055 CEST	192.168.2.4	1.1.1.1	0xe527	Standard query (0)	o160250.ingest.sentry.io	65	IN (0x0001)	false
Apr 26, 2024 06:11:56.605950117 CEST	192.168.2.4	1.1.1.1	0x39fa	Standard query (0)	squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.606695890 CEST	192.168.2.4	1.1.1.1	0x5e3b	Standard query (0)	squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:56.746681929 CEST	192.168.2.4	1.1.1.1	0x3db0	Standard query (0)	api.neuro-id.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:56.746681929 CEST	192.168.2.4	1.1.1.1	0x7b04	Standard query (0)	api.neuro-id.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.913811922 CEST	192.168.2.4	1.1.1.1	0x495d	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.914053917 CEST	192.168.2.4	1.1.1.1	0x6f9f	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:57.014584064 CEST	192.168.2.4	1.1.1.1	0x299	Standard query (0)	onboardfrontend-production-c.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.014859915 CEST	192.168.2.4	1.1.1.1	0xfbea	Standard query (0)	onboardfrontend-production-c.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:57.232541084 CEST	192.168.2.4	1.1.1.1	0x375d	Standard query (0)	data-platform.squarecloudservices.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:57.232541084 CEST	192.168.2.4	1.1.1.1	0x3a16	Standard query (0)	data-platform.squarecloudservices.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.362021923 CEST	192.168.2.4	1.1.1.1	0x7833	Standard query (0)	a8447815042.cdn-pci.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.362341881 CEST	192.168.2.4	1.1.1.1	0xb8a4	Standard query (0)	a8447815042.cdn-pci.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:57.363257885 CEST	192.168.2.4	1.1.1.1	0x1b92	Standard query (0)	tealium-f.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.363257885 CEST	192.168.2.4	1.1.1.1	0xe8ac	Standard query (0)	tealium-f.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:57.707777977 CEST	192.168.2.4	1.1.1.1	0x1ef4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.707916021 CEST	192.168.2.4	1.1.1.1	0xaa43	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:58.191004992 CEST	192.168.2.4	1.1.1.1	0x1068	Standard query (0)	api.squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:58.191179037 CEST	192.168.2.4	1.1.1.1	0xc7eb	Standard query (0)	api.squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:58.330161095 CEST	192.168.2.4	1.1.1.1	0x49dc	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:58.330426931 CEST	192.168.2.4	1.1.1.1	0xf311	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:59.051412106 CEST	192.168.2.4	1.1.1.1	0x8c73	Standard query (0)	api.squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.051412106 CEST	192.168.2.4	1.1.1.1	0x45ef	Standard query (0)	api.squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:59.125830889 CEST	192.168.2.4	1.1.1.1	0xfa4b	Standard query (0)	data-platform.squarecloudservices.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.125832081 CEST	192.168.2.4	1.1.1.1	0xb6f3	Standard query (0)	data-platform.squarecloudservices.com	65	IN (0x0001)	false
Apr 26, 2024 06:11:59.156003952 CEST	192.168.2.4	1.1.1.1	0x287a	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.156271935 CEST	192.168.2.4	1.1.1.1	0xc04a	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 26, 2024 06:11:59.244630098 CEST	192.168.2.4	1.1.1.1	0xc1ef	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.244962931 CEST	192.168.2.4	1.1.1.1	0x2f23	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Apr 26, 2024 06:11:59.917767048 CEST	192.168.2.4	1.1.1.1	0x8bb0	Standard query (0)	rum.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.918164968 CEST	192.168.2.4	1.1.1.1	0xd684	Standard query (0)	rum.browser-intake-datadoghq.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:00.642280102 CEST	192.168.2.4	1.1.1.1	0xcfee	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.642901897 CEST	192.168.2.4	1.1.1.1	0xa293	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 26, 2024 06:12:01.199202061 CEST	192.168.2.4	1.1.1.1	0x3ac6	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.199420929 CEST	192.168.2.4	1.1.1.1	0xe727	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:01.201967955 CEST	192.168.2.4	1.1.1.1	0xeab4	Standard query (0)	d1g145x70srn7h.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.202267885 CEST	192.168.2.4	1.1.1.1	0xaadd	Standard query (0)	d1g145x70srn7h.cloudfront.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:01.316242933 CEST	192.168.2.4	1.1.1.1	0xd4c	Standard query (0)	a.quora.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.316530943 CEST	192.168.2.4	1.1.1.1	0x18c	Standard query (0)	a.quora.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:01.361445904 CEST	192.168.2.4	1.1.1.1	0x1a50	Standard query (0)	secure.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.361702919 CEST	192.168.2.4	1.1.1.1	0xa99d	Standard query (0)	secure.quantserve.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.020010948 CEST	192.168.2.4	1.1.1.1	0x2357	Standard query (0)	9628652.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.020304918 CEST	192.168.2.4	1.1.1.1	0x7bcb	Standard query (0)	9628652.fls.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.242201090 CEST	192.168.2.4	1.1.1.1	0xe3f4	Standard query (0)	martech-production-c.squarecdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.254980087 CEST	192.168.2.4	1.1.1.1	0xc97	Standard query (0)	martech-production-c.squarecdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.259435892 CEST	192.168.2.4	1.1.1.1	0x201a	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.259577036 CEST	192.168.2.4	1.1.1.1	0xdcc4	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.261413097 CEST	192.168.2.4	1.1.1.1	0x47f0	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.261589050 CEST	192.168.2.4	1.1.1.1	0xf3e6	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.263906956 CEST	192.168.2.4	1.1.1.1	0x99aa	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.264146090 CEST	192.168.2.4	1.1.1.1	0x7f87	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.264733076 CEST	192.168.2.4	1.1.1.1	0xe070	Standard query (0)	cdn.sprig.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.264875889 CEST	192.168.2.4	1.1.1.1	0x444d	Standard query (0)	cdn.sprig.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.342689991 CEST	192.168.2.4	1.1.1.1	0xa25a	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.342947960 CEST	192.168.2.4	1.1.1.1	0x2d46	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.442018032 CEST	192.168.2.4	1.1.1.1	0x1ae5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.442367077 CEST	192.168.2.4	1.1.1.1	0xe473	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.557575941 CEST	192.168.2.4	1.1.1.1	0x3a18	Standard query (0)	js.cnnx.link	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.557761908 CEST	192.168.2.4	1.1.1.1	0xdc1b	Standard query (0)	js.cnnx.link	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.605400085 CEST	192.168.2.4	1.1.1.1	0x4585	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.605532885 CEST	192.168.2.4	1.1.1.1	0x5d43	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.794955015 CEST	192.168.2.4	1.1.1.1	0x3afc	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.795130968 CEST	192.168.2.4	1.1.1.1	0x6dfb	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.828537941 CEST	192.168.2.4	1.1.1.1	0x8af8	Standard query (0)	12345.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.828752995 CEST	192.168.2.4	1.1.1.1	0x6411	Standard query (0)	12345.fls.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:02.839287043 CEST	192.168.2.4	1.1.1.1	0x4509	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.839529991 CEST	192.168.2.4	1.1.1.1	0xf141	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.026325941 CEST	192.168.2.4	1.1.1.1	0x2f77	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.026535988 CEST	192.168.2.4	1.1.1.1	0xddf5	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.076376915 CEST	192.168.2.4	1.1.1.1	0x15	Standard query (0)	cdn.bttrack.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.076531887 CEST	192.168.2.4	1.1.1.1	0x20c8	Standard query (0)	cdn.bttrack.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.079967976 CEST	192.168.2.4	1.1.1.1	0xc6d6	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.080281019 CEST	192.168.2.4	1.1.1.1	0x6e73	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.191113949 CEST	192.168.2.4	1.1.1.1	0x5997	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.191376925 CEST	192.168.2.4	1.1.1.1	0x9771	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.281857967 CEST	192.168.2.4	1.1.1.1	0xf84a	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.282785892 CEST	192.168.2.4	1.1.1.1	0xf5aa	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 26, 2024 06:12:03.424046040 CEST	192.168.2.4	1.1.1.1	0x8e4c	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.424232960 CEST	192.168.2.4	1.1.1.1	0xc4f0	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.024800062 CEST	192.168.2.4	1.1.1.1	0x91f3	Standard query (0)	lltrck.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.024945021 CEST	192.168.2.4	1.1.1.1	0xbcb8	Standard query (0)	lltrck.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.025710106 CEST	192.168.2.4	1.1.1.1	0x3750	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.025918007 CEST	192.168.2.4	1.1.1.1	0xf15	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.033113956 CEST	192.168.2.4	1.1.1.1	0x5cd5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.033266068 CEST	192.168.2.4	1.1.1.1	0xa48d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.082643032 CEST	192.168.2.4	1.1.1.1	0xfc8b	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.082866907 CEST	192.168.2.4	1.1.1.1	0x13fa	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.119123936 CEST	192.168.2.4	1.1.1.1	0x8f01	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.119308949 CEST	192.168.2.4	1.1.1.1	0x43ed	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.119865894 CEST	192.168.2.4	1.1.1.1	0xa54a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.120017052 CEST	192.168.2.4	1.1.1.1	0x3e30	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.132749081 CEST	192.168.2.4	1.1.1.1	0x8591	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.134042025 CEST	192.168.2.4	1.1.1.1	0x91db	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.362936020 CEST	192.168.2.4	1.1.1.1	0x3c6a	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.363287926 CEST	192.168.2.4	1.1.1.1	0x2db4	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.363976955 CEST	192.168.2.4	1.1.1.1	0x2b04	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.364116907 CEST	192.168.2.4	1.1.1.1	0xc9c2	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.364819050 CEST	192.168.2.4	1.1.1.1	0xa9a2	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.365000963 CEST	192.168.2.4	1.1.1.1	0xc26a	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:04.799810886 CEST	192.168.2.4	1.1.1.1	0xefc4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.799953938 CEST	192.168.2.4	1.1.1.1	0x4b46	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.060012102 CEST	192.168.2.4	1.1.1.1	0xbf66	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.060306072 CEST	192.168.2.4	1.1.1.1	0xa605	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.062872887 CEST	192.168.2.4	1.1.1.1	0x5c54	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.063170910 CEST	192.168.2.4	1.1.1.1	0x68cd	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.064642906 CEST	192.168.2.4	1.1.1.1	0x761a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.064791918 CEST	192.168.2.4	1.1.1.1	0x7cb4	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.085877895 CEST	192.168.2.4	1.1.1.1	0x8756	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.086194992 CEST	192.168.2.4	1.1.1.1	0xa064	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.102876902 CEST	192.168.2.4	1.1.1.1	0xd7ef	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.103250980 CEST	192.168.2.4	1.1.1.1	0x47b6	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.104597092 CEST	192.168.2.4	1.1.1.1	0x51b0	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.104846001 CEST	192.168.2.4	1.1.1.1	0x208	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.204406977 CEST	192.168.2.4	1.1.1.1	0xa483	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.205060959 CEST	192.168.2.4	1.1.1.1	0xec08	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.226938963 CEST	192.168.2.4	1.1.1.1	0x5e9	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.227142096 CEST	192.168.2.4	1.1.1.1	0xf861	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.732625961 CEST	192.168.2.4	1.1.1.1	0x89da	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.732888937 CEST	192.168.2.4	1.1.1.1	0x2577	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.762322903 CEST	192.168.2.4	1.1.1.1	0x85bd	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.762532949 CEST	192.168.2.4	1.1.1.1	0x6aa8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.792547941 CEST	192.168.2.4	1.1.1.1	0x9fec	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.792762041 CEST	192.168.2.4	1.1.1.1	0x7b91	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.824026108 CEST	192.168.2.4	1.1.1.1	0x4ecd	Standard query (0)	pixel.pointmediatracker.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.824428082 CEST	192.168.2.4	1.1.1.1	0x131e	Standard query (0)	pixel.pointmediatracker.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.844293118 CEST	192.168.2.4	1.1.1.1	0x9c0	Standard query (0)	arttrk.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.844701052 CEST	192.168.2.4	1.1.1.1	0x18d2	Standard query (0)	arttrk.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.855607033 CEST	192.168.2.4	1.1.1.1	0x153f	Standard query (0)	424-iab-218.mktoresp.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.855834007 CEST	192.168.2.4	1.1.1.1	0xe97f	Standard query (0)	424-iab-218.mktoresp.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.856513977 CEST	192.168.2.4	1.1.1.1	0x2f82	Standard query (0)	tags.w55c.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.856897116 CEST	192.168.2.4	1.1.1.1	0xf22a	Standard query (0)	tags.w55c.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.890443087 CEST	192.168.2.4	1.1.1.1	0x13de	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.890696049 CEST	192.168.2.4	1.1.1.1	0x5939	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.932300091 CEST	192.168.2.4	1.1.1.1	0x3cb3	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.932463884 CEST	192.168.2.4	1.1.1.1	0x34c0	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.933604956 CEST	192.168.2.4	1.1.1.1	0xbb8d	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.933914900 CEST	192.168.2.4	1.1.1.1	0xd24e	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:05.934813023 CEST	192.168.2.4	1.1.1.1	0xeec	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.935076952 CEST	192.168.2.4	1.1.1.1	0x8022	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.041316032 CEST	192.168.2.4	1.1.1.1	0xe76b	Standard query (0)	rules.quantcount.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.041652918 CEST	192.168.2.4	1.1.1.1	0x3adb	Standard query (0)	rules.quantcount.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.045831919 CEST	192.168.2.4	1.1.1.1	0x25a0	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.045975924 CEST	192.168.2.4	1.1.1.1	0x5abc	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.048670053 CEST	192.168.2.4	1.1.1.1	0x1d83	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.048846960 CEST	192.168.2.4	1.1.1.1	0xb6d6	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.160047054 CEST	192.168.2.4	1.1.1.1	0x711d	Standard query (0)	q.quora.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.160192013 CEST	192.168.2.4	1.1.1.1	0x85f7	Standard query (0)	q.quora.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.166935921 CEST	192.168.2.4	1.1.1.1	0x1e79	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.167083979 CEST	192.168.2.4	1.1.1.1	0x980e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.168220997 CEST	192.168.2.4	1.1.1.1	0x71e2	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.168355942 CEST	192.168.2.4	1.1.1.1	0x5fc4	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.363153934 CEST	192.168.2.4	1.1.1.1	0x3c7b	Standard query (0)	capi.squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.364171982 CEST	192.168.2.4	1.1.1.1	0x3c0a	Standard query (0)	capi.squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:06.929442883 CEST	192.168.2.4	1.1.1.1	0xd7bd	Standard query (0)	arttrk.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.929613113 CEST	192.168.2.4	1.1.1.1	0x6c2c	Standard query (0)	arttrk.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.053569078 CEST	192.168.2.4	1.1.1.1	0x335e	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.053716898 CEST	192.168.2.4	1.1.1.1	0x5b00	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.149337053 CEST	192.168.2.4	1.1.1.1	0x9fa4	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.149513006 CEST	192.168.2.4	1.1.1.1	0x6237	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.362744093 CEST	192.168.2.4	1.1.1.1	0x9590	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.362898111 CEST	192.168.2.4	1.1.1.1	0x8795	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.363514900 CEST	192.168.2.4	1.1.1.1	0xe3d6	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.363770008 CEST	192.168.2.4	1.1.1.1	0xcd74	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.395157099 CEST	192.168.2.4	1.1.1.1	0x386e	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.395486116 CEST	192.168.2.4	1.1.1.1	0x1273	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.400732040 CEST	192.168.2.4	1.1.1.1	0x5f6e	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.400868893 CEST	192.168.2.4	1.1.1.1	0x65d4	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.412857056 CEST	192.168.2.4	1.1.1.1	0x7394	Standard query (0)	cnv.event.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.413186073 CEST	192.168.2.4	1.1.1.1	0x6b9e	Standard query (0)	cnv.event.prod.bidr.io	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.525733948 CEST	192.168.2.4	1.1.1.1	0xa1ee	Standard query (0)	capi.squareup.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.525883913 CEST	192.168.2.4	1.1.1.1	0xf348	Standard query (0)	capi.squareup.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.579787016 CEST	192.168.2.4	1.1.1.1	0x17e7	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.579932928 CEST	192.168.2.4	1.1.1.1	0xe852	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.615096092 CEST	192.168.2.4	1.1.1.1	0xc276	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.615271091 CEST	192.168.2.4	1.1.1.1	0xfc59	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:07.996927977 CEST	192.168.2.4	1.1.1.1	0xf2b9	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.997072935 CEST	192.168.2.4	1.1.1.1	0xe50c	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.001862049 CEST	192.168.2.4	1.1.1.1	0x7eb9	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.002562046 CEST	192.168.2.4	1.1.1.1	0xcc51	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.119720936 CEST	192.168.2.4	1.1.1.1	0xef69	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.119879007 CEST	192.168.2.4	1.1.1.1	0xfb7c	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.191940069 CEST	192.168.2.4	1.1.1.1	0xd7a0	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.192781925 CEST	192.168.2.4	1.1.1.1	0x26cb	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.279963017 CEST	192.168.2.4	1.1.1.1	0x830e	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.280128002 CEST	192.168.2.4	1.1.1.1	0xd2f3	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.298439980 CEST	192.168.2.4	1.1.1.1	0x6d49	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.298636913 CEST	192.168.2.4	1.1.1.1	0x71e3	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.746244907 CEST	192.168.2.4	1.1.1.1	0x90a8	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.746586084 CEST	192.168.2.4	1.1.1.1	0xe360	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:08.970788956 CEST	192.168.2.4	1.1.1.1	0x9f35	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.971225023 CEST	192.168.2.4	1.1.1.1	0xf7d0	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.006711960 CEST	192.168.2.4	1.1.1.1	0x185	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.006922007 CEST	192.168.2.4	1.1.1.1	0xb14	Standard query (0)	us-central1-sq-sgtm-prod.cloudfunctions.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.021725893 CEST	192.168.2.4	1.1.1.1	0x9aaf	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.021877050 CEST	192.168.2.4	1.1.1.1	0x934	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.145272017 CEST	192.168.2.4	1.1.1.1	0x10c1	Standard query (0)	cnv.event.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.145421028 CEST	192.168.2.4	1.1.1.1	0x39e3	Standard query (0)	cnv.event.prod.bidr.io	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.359888077 CEST	192.168.2.4	1.1.1.1	0xfadb	Standard query (0)	tags.w55c.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.360058069 CEST	192.168.2.4	1.1.1.1	0x1fc1	Standard query (0)	tags.w55c.net	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.621726036 CEST	192.168.2.4	1.1.1.1	0x1ee4	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.621876955 CEST	192.168.2.4	1.1.1.1	0x3926	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.764400959 CEST	192.168.2.4	1.1.1.1	0xf37c	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.764533043 CEST	192.168.2.4	1.1.1.1	0x7e20	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.800434113 CEST	192.168.2.4	1.1.1.1	0xf6a3	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.800718069 CEST	192.168.2.4	1.1.1.1	0x1092	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.816951036 CEST	192.168.2.4	1.1.1.1	0x181f	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.817097902 CEST	192.168.2.4	1.1.1.1	0x6c21	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:09.818376064 CEST	192.168.2.4	1.1.1.1	0xe709	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.818522930 CEST	192.168.2.4	1.1.1.1	0xa5ed	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:10.277508974 CEST	192.168.2.4	1.1.1.1	0xaea6	Standard query (0)	trc-events.taboola.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:10.277651072 CEST	192.168.2.4	1.1.1.1	0x7885	Standard query (0)	trc-events.taboola.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:10.874376059 CEST	192.168.2.4	1.1.1.1	0x601b	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:10.874838114 CEST	192.168.2.4	1.1.1.1	0x405b	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:10.875996113 CEST	192.168.2.4	1.1.1.1	0xcf34	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:10.876216888 CEST	192.168.2.4	1.1.1.1	0xa35e	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:10.909164906 CEST	192.168.2.4	1.1.1.1	0x65f2	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:10.909296989 CEST	192.168.2.4	1.1.1.1	0x8749	Standard query (0)	pixel.quantserve.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:11.522542953 CEST	192.168.2.4	1.1.1.1	0x4aad	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.522892952 CEST	192.168.2.4	1.1.1.1	0xb8b3	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:11.803610086 CEST	192.168.2.4	1.1.1.1	0x9c6	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.803976059 CEST	192.168.2.4	1.1.1.1	0x12e5	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:11.818015099 CEST	192.168.2.4	1.1.1.1	0x8ca5	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.818412066 CEST	192.168.2.4	1.1.1.1	0x3da2	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:11.821621895 CEST	192.168.2.4	1.1.1.1	0xff84	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.821878910 CEST	192.168.2.4	1.1.1.1	0xeb3	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:11.940273046 CEST	192.168.2.4	1.1.1.1	0x71	Standard query (0)	api.sprig.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.940464973 CEST	192.168.2.4	1.1.1.1	0xcd07	Standard query (0)	api.sprig.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:12.301687002 CEST	192.168.2.4	1.1.1.1	0x9e5e	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.301893950 CEST	192.168.2.4	1.1.1.1	0xd8db	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 26, 2024 06:12:12.755753994 CEST	192.168.2.4	1.1.1.1	0x3ef2	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.755892992 CEST	192.168.2.4	1.1.1.1	0xaa76	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Apr 26, 2024 06:12:13.675131083 CEST	192.168.2.4	1.1.1.1	0x9755	Standard query (0)	api.sprig.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.675354958 CEST	192.168.2.4	1.1.1.1	0xa416	Standard query (0)	api.sprig.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 06:10:46.733927011 CEST	1.1.1.1	192.168.2.4	0xac7	No error (0)	www.painrehabilitation.com.au	painrehabilitation.com.au		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:46.733927011 CEST	1.1.1.1	192.168.2.4	0xac7	No error (0)	painrehabilitation.com.au		199.34.228.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:46.846587896 CEST	1.1.1.1	192.168.2.4	0xea01	No error (0)	www.painrehabilitation.com.au	painrehabilitation.com.au		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490367889 CEST	1.1.1.1	192.168.2.4	0x2a02	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490367889 CEST	1.1.1.1	192.168.2.4	0x2a02	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490367889 CEST	1.1.1.1	192.168.2.4	0x2a02	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490367889 CEST	1.1.1.1	192.168.2.4	0x2a02	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490367889 CEST	1.1.1.1	192.168.2.4	0x2a02	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:47.490505934 CEST	1.1.1.1	192.168.2.4	0xb32	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:49.085134029 CEST	1.1.1.1	192.168.2.4	0x4edc	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.085937977 CEST	1.1.1.1	192.168.2.4	0xd80a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:10:49.177795887 CEST	1.1.1.1	192.168.2.4	0x46b1	No error (0)	www.painrehabilitation.com.au	painrehabilitation.com.au		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:49.237752914 CEST	1.1.1.1	192.168.2.4	0x3999	No error (0)	www.painrehabilitation.com.au	painrehabilitation.com.au		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:49.237752914 CEST	1.1.1.1	192.168.2.4	0x3999	No error (0)	painrehabilitation.com.au		199.34.228.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.727560043 CEST	1.1.1.1	192.168.2.4	0xf536	No error (0)	www.weebly.com		74.115.51.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.727560043 CEST	1.1.1.1	192.168.2.4	0xf536	No error (0)	www.weebly.com		74.115.51.6	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.784871101 CEST	1.1.1.1	192.168.2.4	0x1d73	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:49.784871101 CEST	1.1.1.1	192.168.2.4	0x1d73	No error (0)	weebly.map.fastly.net		151.101.1.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.784871101 CEST	1.1.1.1	192.168.2.4	0x1d73	No error (0)	weebly.map.fastly.net		151.101.65.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.784871101 CEST	1.1.1.1	192.168.2.4	0x1d73	No error (0)	weebly.map.fastly.net		151.101.129.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.784871101 CEST	1.1.1.1	192.168.2.4	0x1d73	No error (0)	weebly.map.fastly.net		151.101.193.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:49.786853075 CEST	1.1.1.1	192.168.2.4	0x6921	No error (0)	cdn2.editmysite.com	weebly.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:50.645550013 CEST	1.1.1.1	192.168.2.4	0xf75a	No error (0)	www.editmysite.com		162.159.140.60	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:50.645550013 CEST	1.1.1.1	192.168.2.4	0xf75a	No error (0)	www.editmysite.com		172.66.0.60	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.168562889 CEST	1.1.1.1	192.168.2.4	0x94d	No error (0)	www.editmysite.com		172.66.0.60	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.168562889 CEST	1.1.1.1	192.168.2.4	0x94d	No error (0)	www.editmysite.com		162.159.140.60	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.807730913 CEST	1.1.1.1	192.168.2.4	0x3241	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:51.807730913 CEST	1.1.1.1	192.168.2.4	0x3241	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		35.85.25.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.807730913 CEST	1.1.1.1	192.168.2.4	0x3241	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		54.200.77.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:51.822946072 CEST	1.1.1.1	192.168.2.4	0x609e	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:53.516288042 CEST	1.1.1.1	192.168.2.4	0x81f6	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:54.482331991 CEST	1.1.1.1	192.168.2.4	0x44a1	No error (0)	ec.editmysite.com	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:10:54.482331991 CEST	1.1.1.1	192.168.2.4	0x44a1	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		54.200.77.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:10:54.482331991 CEST	1.1.1.1	192.168.2.4	0x44a1	No error (0)	sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com		35.85.25.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:02.799707890 CEST	1.1.1.1	192.168.2.4	0x9b3a	No error (0)	windowsupdatebg.s.llnwi.net		208.111.136.0	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:02.799707890 CEST	1.1.1.1	192.168.2.4	0x9b3a	No error (0)	windowsupdatebg.s.llnwi.net		208.111.136.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:03.441011906 CEST	1.1.1.1	192.168.2.4	0x5575	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:03.441011906 CEST	1.1.1.1	192.168.2.4	0x5575	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:17.302047968 CEST	1.1.1.1	192.168.2.4	0xa5f7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:17.302047968 CEST	1.1.1.1	192.168.2.4	0xa5f7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.391633034 CEST	1.1.1.1	192.168.2.4	0x66cf	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.391880989 CEST	1.1.1.1	192.168.2.4	0x6a2f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.391880989 CEST	1.1.1.1	192.168.2.4	0x6a2f	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.394978046 CEST	1.1.1.1	192.168.2.4	0x4e9f	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.394978046 CEST	1.1.1.1	192.168.2.4	0x4e9f	No error (0)	platform.twitter.map.fastly.net		146.75.124.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.395116091 CEST	1.1.1.1	192.168.2.4	0x61b7	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.395116091 CEST	1.1.1.1	192.168.2.4	0x61b7	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.395116091 CEST	1.1.1.1	192.168.2.4	0x61b7	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.395116091 CEST	1.1.1.1	192.168.2.4	0x61b7	No error (0)	cs1-lb-us.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.837939024 CEST	1.1.1.1	192.168.2.4	0xd259	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.838325977 CEST	1.1.1.1	192.168.2.4	0x136b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.838325977 CEST	1.1.1.1	192.168.2.4	0x136b	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.885550976 CEST	1.1.1.1	192.168.2.4	0x9c34	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.885550976 CEST	1.1.1.1	192.168.2.4	0x9c34	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.885550976 CEST	1.1.1.1	192.168.2.4	0x9c34	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.885550976 CEST	1.1.1.1	192.168.2.4	0x9c34	No error (0)	cs1-lb-us.8315.ecdns.net	cs491.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.885550976 CEST	1.1.1.1	192.168.2.4	0x9c34	No error (0)	cs491.wac.edgecastcdn.net		192.229.163.25	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:26.886416912 CEST	1.1.1.1	192.168.2.4	0x1c31	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.886416912 CEST	1.1.1.1	192.168.2.4	0x1c31	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.886416912 CEST	1.1.1.1	192.168.2.4	0x1c31	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:26.886416912 CEST	1.1.1.1	192.168.2.4	0x1c31	No error (0)	cs1-lb-us.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:28.423039913 CEST	1.1.1.1	192.168.2.4	0xf57e	No error (0)	syndication.twitter.com		104.244.42.200	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:29.928476095 CEST	1.1.1.1	192.168.2.4	0x2b96	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:29.928606987 CEST	1.1.1.1	192.168.2.4	0x7502	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:29.928606987 CEST	1.1.1.1	192.168.2.4	0x7502	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:30.352058887 CEST	1.1.1.1	192.168.2.4	0x5db6	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:30.352058887 CEST	1.1.1.1	192.168.2.4	0x5db6	No error (0)	platform.twitter.map.fastly.net		146.75.124.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:30.356261969 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:30.356261969 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:30.356261969 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:30.356261969 CEST	1.1.1.1	192.168.2.4	0x60ce	No error (0)	cs1-lb-us.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:30.512088060 CEST	1.1.1.1	192.168.2.4	0x9291	No error (0)	syndication.twitter.com		104.244.42.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:31.024849892 CEST	1.1.1.1	192.168.2.4	0xe6e0	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:31.024849892 CEST	1.1.1.1	192.168.2.4	0xe6e0	No error (0)	scontent.xx.fbcdn.net		31.13.67.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:31.025595903 CEST	1.1.1.1	192.168.2.4	0xb328	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:31.287769079 CEST	1.1.1.1	192.168.2.4	0x3540	No error (0)	syndication.twitter.com		104.244.42.200	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:31.593919039 CEST	1.1.1.1	192.168.2.4	0x28e8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:31.594171047 CEST	1.1.1.1	192.168.2.4	0x6cc6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:31.594171047 CEST	1.1.1.1	192.168.2.4	0x6cc6	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.174590111 CEST	1.1.1.1	192.168.2.4	0xb46	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.274333954 CEST	1.1.1.1	192.168.2.4	0xa561	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:32.274333954 CEST	1.1.1.1	192.168.2.4	0xa561	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.275029898 CEST	1.1.1.1	192.168.2.4	0x5bdb	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:32.902070045 CEST	1.1.1.1	192.168.2.4	0x1404	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:32.902070045 CEST	1.1.1.1	192.168.2.4	0x1404	No error (0)	scontent.xx.fbcdn.net		31.13.67.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:32.902306080 CEST	1.1.1.1	192.168.2.4	0x7c06	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:36.370796919 CEST	1.1.1.1	192.168.2.4	0x3908	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:36.370908022 CEST	1.1.1.1	192.168.2.4	0xdb64	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:36.370908022 CEST	1.1.1.1	192.168.2.4	0xdb64	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:36.636197090 CEST	1.1.1.1	192.168.2.4	0x8795	No error (0)	scontent.xx.fbcdn.net		31.13.67.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:37.395452976 CEST	1.1.1.1	192.168.2.4	0xd835	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:37.967586994 CEST	1.1.1.1	192.168.2.4	0x4bdf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:37.967586994 CEST	1.1.1.1	192.168.2.4	0x4bdf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:40.176297903 CEST	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:40.176605940 CEST	1.1.1.1	192.168.2.4	0xee48	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:11:49.145652056 CEST	1.1.1.1	192.168.2.4	0x734a	No error (0)	www.weebly.com		74.115.51.6	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:49.145652056 CEST	1.1.1.1	192.168.2.4	0x734a	No error (0)	www.weebly.com		74.115.51.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:50.356980085 CEST	1.1.1.1	192.168.2.4	0xc8de	No error (0)	squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:50.356980085 CEST	1.1.1.1	192.168.2.4	0xc8de	No error (0)	squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.244122982 CEST	1.1.1.1	192.168.2.4	0x29f5	No error (0)	square-fonts-production-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:53.244122982 CEST	1.1.1.1	192.168.2.4	0x29f5	No error (0)	squareup.map.fastly.net		151.101.1.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.244122982 CEST	1.1.1.1	192.168.2.4	0x29f5	No error (0)	squareup.map.fastly.net		151.101.65.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.244122982 CEST	1.1.1.1	192.168.2.4	0x29f5	No error (0)	squareup.map.fastly.net		151.101.129.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.244122982 CEST	1.1.1.1	192.168.2.4	0x29f5	No error (0)	squareup.map.fastly.net		151.101.193.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.245167971 CEST	1.1.1.1	192.168.2.4	0x48e	No error (0)	square-fonts-production-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:53.245337963 CEST	1.1.1.1	192.168.2.4	0x5789	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.245824099 CEST	1.1.1.1	192.168.2.4	0xcaad	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:11:53.263032913 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	onboardfrontend-production-c.squarecdn.com	dotl3ol78edio.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:53.263032913 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.3	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.263032913 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.263032913 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.33	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.263032913 CEST	1.1.1.1	192.168.2.4	0x82ab	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.112	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:53.275580883 CEST	1.1.1.1	192.168.2.4	0x274d	No error (0)	onboardfrontend-production-c.squarecdn.com	dotl3ol78edio.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:55.686459064 CEST	1.1.1.1	192.168.2.4	0x11ad	No error (0)	o160250.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.989737034 CEST	1.1.1.1	192.168.2.4	0xb493	No error (0)	cdn-pci.optimizely.com	cdn-pci2.optimizely.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:55.990536928 CEST	1.1.1.1	192.168.2.4	0x1943	No error (0)	martech-production-c.squarecdn.com	d3vd5wnau9aeoh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:55.991285086 CEST	1.1.1.1	192.168.2.4	0x236	No error (0)	martech-production-c.squarecdn.com	d3vd5wnau9aeoh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:55.991285086 CEST	1.1.1.1	192.168.2.4	0x236	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.56	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.991285086 CEST	1.1.1.1	192.168.2.4	0x236	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.991285086 CEST	1.1.1.1	192.168.2.4	0x236	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:55.991285086 CEST	1.1.1.1	192.168.2.4	0x236	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.019845009 CEST	1.1.1.1	192.168.2.4	0x22e5	No error (0)	cdn-pci.optimizely.com	cdn-pci2.optimizely.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:56.059762955 CEST	1.1.1.1	192.168.2.4	0x2e0a	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:56.060889006 CEST	1.1.1.1	192.168.2.4	0xf325	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:56.659158945 CEST	1.1.1.1	192.168.2.4	0x7c9c	No error (0)	o160250.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.753746033 CEST	1.1.1.1	192.168.2.4	0x39fa	No error (0)	squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.753746033 CEST	1.1.1.1	192.168.2.4	0x39fa	No error (0)	squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.911919117 CEST	1.1.1.1	192.168.2.4	0x7b04	No error (0)	api.neuro-id.com		54.148.46.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.911919117 CEST	1.1.1.1	192.168.2.4	0x7b04	No error (0)	api.neuro-id.com		52.40.119.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:56.911919117 CEST	1.1.1.1	192.168.2.4	0x7b04	No error (0)	api.neuro-id.com		35.161.38.122	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.061131954 CEST	1.1.1.1	192.168.2.4	0x495d	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.061882973 CEST	1.1.1.1	192.168.2.4	0x6f9f	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.166935921 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	onboardfrontend-production-c.squarecdn.com	dotl3ol78edio.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.166935921 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.33	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.166935921 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.112	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.166935921 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.3	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.166935921 CEST	1.1.1.1	192.168.2.4	0x299	No error (0)	dotl3ol78edio.cloudfront.net		13.32.87.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.179821968 CEST	1.1.1.1	192.168.2.4	0xfbea	No error (0)	onboardfrontend-production-c.squarecdn.com	dotl3ol78edio.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.422211885 CEST	1.1.1.1	192.168.2.4	0x3a16	No error (0)	data-platform.squarecloudservices.com		34.98.67.114	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.512897015 CEST	1.1.1.1	192.168.2.4	0x1b92	No error (0)	tealium-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.512897015 CEST	1.1.1.1	192.168.2.4	0x1b92	No error (0)	squareup.map.fastly.net		151.101.1.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.512897015 CEST	1.1.1.1	192.168.2.4	0x1b92	No error (0)	squareup.map.fastly.net		151.101.65.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.512897015 CEST	1.1.1.1	192.168.2.4	0x1b92	No error (0)	squareup.map.fastly.net		151.101.129.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.512897015 CEST	1.1.1.1	192.168.2.4	0x1b92	No error (0)	squareup.map.fastly.net		151.101.193.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:57.513071060 CEST	1.1.1.1	192.168.2.4	0xe8ac	No error (0)	tealium-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.540230036 CEST	1.1.1.1	192.168.2.4	0x7833	No error (0)	a8447815042.cdn-pci.optimizely.com	star2.cdn-pci.optimizely.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.543781996 CEST	1.1.1.1	192.168.2.4	0xb8a4	No error (0)	a8447815042.cdn-pci.optimizely.com	star2.cdn-pci.optimizely.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:57.854860067 CEST	1.1.1.1	192.168.2.4	0xaa43	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:11:57.855663061 CEST	1.1.1.1	192.168.2.4	0x1ef4	No error (0)	www.google.com		172.217.2.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:58.339440107 CEST	1.1.1.1	192.168.2.4	0x1068	No error (0)	api.squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:58.339440107 CEST	1.1.1.1	192.168.2.4	0x1068	No error (0)	api.squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:58.477408886 CEST	1.1.1.1	192.168.2.4	0x49dc	No error (0)	logx.optimizely.com		34.111.140.246	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.198503017 CEST	1.1.1.1	192.168.2.4	0x8c73	No error (0)	api.squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.198503017 CEST	1.1.1.1	192.168.2.4	0x8c73	No error (0)	api.squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.274099112 CEST	1.1.1.1	192.168.2.4	0xfa4b	No error (0)	data-platform.squarecloudservices.com		34.98.67.114	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.302645922 CEST	1.1.1.1	192.168.2.4	0x287a	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.302645922 CEST	1.1.1.1	192.168.2.4	0x287a	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:11:59.303112030 CEST	1.1.1.1	192.168.2.4	0xc04a	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 26, 2024 06:11:59.392215014 CEST	1.1.1.1	192.168.2.4	0xc1ef	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:11:59.392332077 CEST	1.1.1.1	192.168.2.4	0x2f23	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.153.139	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.153.123	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.153.122	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.155.165	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.153.138	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.065538883 CEST	1.1.1.1	192.168.2.4	0x8bb0	No error (0)	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		3.233.155.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.066128969 CEST	1.1.1.1	192.168.2.4	0xd684	No error (0)	rum.browser-intake-datadoghq.com	alb-logs-http-rum-pub-s0-1171131448.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:00.789535046 CEST	1.1.1.1	192.168.2.4	0xcfee	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.789535046 CEST	1.1.1.1	192.168.2.4	0xcfee	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:00.791066885 CEST	1.1.1.1	192.168.2.4	0xa293	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 26, 2024 06:12:01.346407890 CEST	1.1.1.1	192.168.2.4	0x3ac6	No error (0)	stats.g.doubleclick.net		173.194.213.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.346407890 CEST	1.1.1.1	192.168.2.4	0x3ac6	No error (0)	stats.g.doubleclick.net		173.194.213.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.346407890 CEST	1.1.1.1	192.168.2.4	0x3ac6	No error (0)	stats.g.doubleclick.net		173.194.213.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.346407890 CEST	1.1.1.1	192.168.2.4	0x3ac6	No error (0)	stats.g.doubleclick.net		173.194.213.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.352211952 CEST	1.1.1.1	192.168.2.4	0xeab4	No error (0)	d1g145x70srn7h.cloudfront.net		13.226.52.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.352211952 CEST	1.1.1.1	192.168.2.4	0xeab4	No error (0)	d1g145x70srn7h.cloudfront.net		13.226.52.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.352211952 CEST	1.1.1.1	192.168.2.4	0xeab4	No error (0)	d1g145x70srn7h.cloudfront.net		13.226.52.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.352211952 CEST	1.1.1.1	192.168.2.4	0xeab4	No error (0)	d1g145x70srn7h.cloudfront.net		13.226.52.40	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.464009047 CEST	1.1.1.1	192.168.2.4	0x18c	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:01.465112925 CEST	1.1.1.1	192.168.2.4	0xd4c	No error (0)	a.quora.com	a.quora.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.509007931 CEST	1.1.1.1	192.168.2.4	0x1a50	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:01.510504007 CEST	1.1.1.1	192.168.2.4	0xa99d	No error (0)	secure.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:01.510504007 CEST	1.1.1.1	192.168.2.4	0xa99d	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.201294899 CEST	1.1.1.1	192.168.2.4	0x2357	No error (0)	9628652.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.201294899 CEST	1.1.1.1	192.168.2.4	0x2357	No error (0)	dart.l.doubleclick.net		142.250.217.230	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.201997995 CEST	1.1.1.1	192.168.2.4	0x7bcb	No error (0)	9628652.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.392328978 CEST	1.1.1.1	192.168.2.4	0xe3f4	No error (0)	martech-production-c.squarecdn.com	d3vd5wnau9aeoh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.392328978 CEST	1.1.1.1	192.168.2.4	0xe3f4	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.392328978 CEST	1.1.1.1	192.168.2.4	0xe3f4	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.37	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.392328978 CEST	1.1.1.1	192.168.2.4	0xe3f4	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.56	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.392328978 CEST	1.1.1.1	192.168.2.4	0xe3f4	No error (0)	d3vd5wnau9aeoh.cloudfront.net		13.226.52.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.402059078 CEST	1.1.1.1	192.168.2.4	0xc97	No error (0)	martech-production-c.squarecdn.com	d3vd5wnau9aeoh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.407819033 CEST	1.1.1.1	192.168.2.4	0x201a	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.407819033 CEST	1.1.1.1	192.168.2.4	0x201a	No error (0)	d1ykf07e75w7ss.cloudfront.net		13.226.53.63	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.408227921 CEST	1.1.1.1	192.168.2.4	0xdcc4	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.408250093 CEST	1.1.1.1	192.168.2.4	0x47f0	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.408250093 CEST	1.1.1.1	192.168.2.4	0x47f0	No error (0)	dg2iu7dxxehbo.cloudfront.net		13.32.115.116	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.409018993 CEST	1.1.1.1	192.168.2.4	0xf3e6	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.411415100 CEST	1.1.1.1	192.168.2.4	0x7f87	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.411454916 CEST	1.1.1.1	192.168.2.4	0x99aa	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.411454916 CEST	1.1.1.1	192.168.2.4	0x99aa	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.427289009 CEST	1.1.1.1	192.168.2.4	0xe070	No error (0)	cdn.sprig.com		108.157.173.109	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.427289009 CEST	1.1.1.1	192.168.2.4	0xe070	No error (0)	cdn.sprig.com		108.157.173.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.427289009 CEST	1.1.1.1	192.168.2.4	0xe070	No error (0)	cdn.sprig.com		108.157.173.76	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.427289009 CEST	1.1.1.1	192.168.2.4	0xe070	No error (0)	cdn.sprig.com		108.157.173.99	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.490490913 CEST	1.1.1.1	192.168.2.4	0x2d46	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.491173983 CEST	1.1.1.1	192.168.2.4	0xa25a	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.589293003 CEST	1.1.1.1	192.168.2.4	0x1ae5	No error (0)	stats.g.doubleclick.net		173.194.213.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.589293003 CEST	1.1.1.1	192.168.2.4	0x1ae5	No error (0)	stats.g.doubleclick.net		173.194.213.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.589293003 CEST	1.1.1.1	192.168.2.4	0x1ae5	No error (0)	stats.g.doubleclick.net		173.194.213.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.589293003 CEST	1.1.1.1	192.168.2.4	0x1ae5	No error (0)	stats.g.doubleclick.net		173.194.213.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706106901 CEST	1.1.1.1	192.168.2.4	0xdc1b	No error (0)	js.cnnx.link	d2wpodxytd2amw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706383944 CEST	1.1.1.1	192.168.2.4	0x3a18	No error (0)	js.cnnx.link	d2wpodxytd2amw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706383944 CEST	1.1.1.1	192.168.2.4	0x3a18	No error (0)	d2wpodxytd2amw.cloudfront.net		18.239.225.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706383944 CEST	1.1.1.1	192.168.2.4	0x3a18	No error (0)	d2wpodxytd2amw.cloudfront.net		18.239.225.40	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706383944 CEST	1.1.1.1	192.168.2.4	0x3a18	No error (0)	d2wpodxytd2amw.cloudfront.net		18.239.225.13	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.706383944 CEST	1.1.1.1	192.168.2.4	0x3a18	No error (0)	d2wpodxytd2amw.cloudfront.net		18.239.225.55	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.753143072 CEST	1.1.1.1	192.168.2.4	0x4585	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.753143072 CEST	1.1.1.1	192.168.2.4	0x4585	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.754904985 CEST	1.1.1.1	192.168.2.4	0x5d43	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:02.942715883 CEST	1.1.1.1	192.168.2.4	0x3afc	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.942715883 CEST	1.1.1.1	192.168.2.4	0x3afc	No error (0)	platform.twitter.map.fastly.net		146.75.124.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:02.943075895 CEST	1.1.1.1	192.168.2.4	0x6dfb	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:02.987225056 CEST	1.1.1.1	192.168.2.4	0x4509	No error (0)	td.doubleclick.net		142.250.64.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.008440971 CEST	1.1.1.1	192.168.2.4	0x6411	No error (0)	12345.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.011984110 CEST	1.1.1.1	192.168.2.4	0x8af8	No error (0)	12345.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.011984110 CEST	1.1.1.1	192.168.2.4	0x8af8	No error (0)	dart.l.doubleclick.net		192.178.50.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.174391031 CEST	1.1.1.1	192.168.2.4	0x2f77	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.174391031 CEST	1.1.1.1	192.168.2.4	0x2f77	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.175007105 CEST	1.1.1.1	192.168.2.4	0xddf5	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.175007105 CEST	1.1.1.1	192.168.2.4	0xddf5	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.223812103 CEST	1.1.1.1	192.168.2.4	0x20c8	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.226165056 CEST	1.1.1.1	192.168.2.4	0x15	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.226982117 CEST	1.1.1.1	192.168.2.4	0xc6d6	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.338798046 CEST	1.1.1.1	192.168.2.4	0x9771	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.338798046 CEST	1.1.1.1	192.168.2.4	0x9771	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.338861942 CEST	1.1.1.1	192.168.2.4	0x5997	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.338861942 CEST	1.1.1.1	192.168.2.4	0x5997	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:03.429424047 CEST	1.1.1.1	192.168.2.4	0xf84a	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.429424047 CEST	1.1.1.1	192.168.2.4	0xf84a	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.429424047 CEST	1.1.1.1	192.168.2.4	0xf84a	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.429424047 CEST	1.1.1.1	192.168.2.4	0xf84a	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:03.591334105 CEST	1.1.1.1	192.168.2.4	0x8e4c	No error (0)	us-central1-sq-sgtm-prod.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.173648119 CEST	1.1.1.1	192.168.2.4	0x3750	No error (0)	tag.demandbase.com		13.249.98.43	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.173648119 CEST	1.1.1.1	192.168.2.4	0x3750	No error (0)	tag.demandbase.com		13.249.98.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.173648119 CEST	1.1.1.1	192.168.2.4	0x3750	No error (0)	tag.demandbase.com		13.249.98.101	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.173648119 CEST	1.1.1.1	192.168.2.4	0x3750	No error (0)	tag.demandbase.com		13.249.98.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.180346966 CEST	1.1.1.1	192.168.2.4	0x5cd5	No error (0)	googleads.g.doubleclick.net		142.250.217.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.181780100 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:04.190720081 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	lltrck.com		44.207.205.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.190720081 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	lltrck.com		34.203.48.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.230535030 CEST	1.1.1.1	192.168.2.4	0xfc8b	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.230535030 CEST	1.1.1.1	192.168.2.4	0xfc8b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.233196974 CEST	1.1.1.1	192.168.2.4	0x13fa	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.233196974 CEST	1.1.1.1	192.168.2.4	0x13fa	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.266331911 CEST	1.1.1.1	192.168.2.4	0x8f01	No error (0)	adservice.google.com		142.250.64.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.266412973 CEST	1.1.1.1	192.168.2.4	0x43ed	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:04.267153978 CEST	1.1.1.1	192.168.2.4	0xa54a	No error (0)	ad.doubleclick.net		172.217.3.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.267721891 CEST	1.1.1.1	192.168.2.4	0x3e30	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:04.279545069 CEST	1.1.1.1	192.168.2.4	0x8591	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.279545069 CEST	1.1.1.1	192.168.2.4	0x8591	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.279545069 CEST	1.1.1.1	192.168.2.4	0x8591	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.279545069 CEST	1.1.1.1	192.168.2.4	0x8591	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.510832071 CEST	1.1.1.1	192.168.2.4	0x3c6a	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.510832071 CEST	1.1.1.1	192.168.2.4	0x3c6a	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.510832071 CEST	1.1.1.1	192.168.2.4	0x3c6a	No error (0)	dualstack.pinterest.map.fastly.net		146.75.124.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.510977983 CEST	1.1.1.1	192.168.2.4	0x2db4	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.510977983 CEST	1.1.1.1	192.168.2.4	0x2db4	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.511946917 CEST	1.1.1.1	192.168.2.4	0x2b04	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.511946917 CEST	1.1.1.1	192.168.2.4	0x2b04	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.511946917 CEST	1.1.1.1	192.168.2.4	0x2b04	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.511946917 CEST	1.1.1.1	192.168.2.4	0x2b04	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.511946917 CEST	1.1.1.1	192.168.2.4	0x2b04	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:04.512298107 CEST	1.1.1.1	192.168.2.4	0xc9c2	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.512845039 CEST	1.1.1.1	192.168.2.4	0xa9a2	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.513535023 CEST	1.1.1.1	192.168.2.4	0xc26a	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:04.946553946 CEST	1.1.1.1	192.168.2.4	0x4b46	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:04.947594881 CEST	1.1.1.1	192.168.2.4	0xefc4	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.207942963 CEST	1.1.1.1	192.168.2.4	0xbf66	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.207942963 CEST	1.1.1.1	192.168.2.4	0xbf66	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.207942963 CEST	1.1.1.1	192.168.2.4	0xbf66	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.207942963 CEST	1.1.1.1	192.168.2.4	0xbf66	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.207942963 CEST	1.1.1.1	192.168.2.4	0xbf66	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.210217953 CEST	1.1.1.1	192.168.2.4	0x5c54	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.210217953 CEST	1.1.1.1	192.168.2.4	0x5c54	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.39	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.210217953 CEST	1.1.1.1	192.168.2.4	0x5c54	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.210217953 CEST	1.1.1.1	192.168.2.4	0x5c54	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.212249041 CEST	1.1.1.1	192.168.2.4	0x761a	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.233017921 CEST	1.1.1.1	192.168.2.4	0x8756	No error (0)	ad.doubleclick.net		172.217.3.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.233752012 CEST	1.1.1.1	192.168.2.4	0xa064	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:05.249849081 CEST	1.1.1.1	192.168.2.4	0xd7ef	No error (0)	adservice.google.com		142.251.35.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.251086950 CEST	1.1.1.1	192.168.2.4	0x47b6	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:05.251256943 CEST	1.1.1.1	192.168.2.4	0x51b0	No error (0)	ad.doubleclick.net		142.250.217.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.251775026 CEST	1.1.1.1	192.168.2.4	0x208	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:05.351650000 CEST	1.1.1.1	192.168.2.4	0xa483	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.351650000 CEST	1.1.1.1	192.168.2.4	0xa483	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.353535891 CEST	1.1.1.1	192.168.2.4	0xec08	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.375179052 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	api.company-target.com		13.35.116.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.375179052 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	api.company-target.com		13.35.116.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.375179052 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	api.company-target.com		13.35.116.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.375179052 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	api.company-target.com		13.35.116.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.880037069 CEST	1.1.1.1	192.168.2.4	0x89da	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.909606934 CEST	1.1.1.1	192.168.2.4	0x85bd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.910778046 CEST	1.1.1.1	192.168.2.4	0x6aa8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.939160109 CEST	1.1.1.1	192.168.2.4	0x9fec	No error (0)	cm.g.doubleclick.net		142.250.64.162	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.972007990 CEST	1.1.1.1	192.168.2.4	0x4ecd	No error (0)	pixel.pointmediatracker.com	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.972007990 CEST	1.1.1.1	192.168.2.4	0x4ecd	No error (0)	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com		44.193.224.11	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.972007990 CEST	1.1.1.1	192.168.2.4	0x4ecd	No error (0)	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com		34.237.44.93	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.972007990 CEST	1.1.1.1	192.168.2.4	0x4ecd	No error (0)	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com		52.0.246.240	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.972038984 CEST	1.1.1.1	192.168.2.4	0x131e	No error (0)	pixel.pointmediatracker.com	d-jt77dp51x5.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:05.992350101 CEST	1.1.1.1	192.168.2.4	0x9c0	No error (0)	arttrk.com		52.3.125.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.992350101 CEST	1.1.1.1	192.168.2.4	0x9c0	No error (0)	arttrk.com		44.208.37.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.992350101 CEST	1.1.1.1	192.168.2.4	0x9c0	No error (0)	arttrk.com		52.22.38.2	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:05.992350101 CEST	1.1.1.1	192.168.2.4	0x9c0	No error (0)	arttrk.com		52.200.221.235	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.003823996 CEST	1.1.1.1	192.168.2.4	0xf22a	No error (0)	tags.w55c.net	geotags.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.003823996 CEST	1.1.1.1	192.168.2.4	0xf22a	No error (0)	geotags.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	tags.w55c.net	geotags.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	geotags.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		52.5.14.134	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		52.205.65.239	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		54.205.149.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.004543066 CEST	1.1.1.1	192.168.2.4	0x2f82	No error (0)	cdn.w55c.net		54.166.33.239	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.028954029 CEST	1.1.1.1	192.168.2.4	0x153f	No error (0)	424-iab-218.mktoresp.com		192.28.147.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.037400007 CEST	1.1.1.1	192.168.2.4	0x13de	No error (0)	ad.doubleclick.net		172.217.3.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.037863016 CEST	1.1.1.1	192.168.2.4	0x5939	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:06.079003096 CEST	1.1.1.1	192.168.2.4	0x3cb3	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.079003096 CEST	1.1.1.1	192.168.2.4	0x3cb3	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.079003096 CEST	1.1.1.1	192.168.2.4	0x3cb3	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.079003096 CEST	1.1.1.1	192.168.2.4	0x3cb3	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.079003096 CEST	1.1.1.1	192.168.2.4	0x3cb3	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.080502033 CEST	1.1.1.1	192.168.2.4	0x34c0	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.082031012 CEST	1.1.1.1	192.168.2.4	0xeec	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.39	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.082031012 CEST	1.1.1.1	192.168.2.4	0xeec	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.082031012 CEST	1.1.1.1	192.168.2.4	0xeec	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.082031012 CEST	1.1.1.1	192.168.2.4	0xeec	No error (0)	ara.paa-reporting-advertising.amazon		18.173.166.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.102771044 CEST	1.1.1.1	192.168.2.4	0xbb8d	No error (0)	us-central1-sq-sgtm-prod.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.190363884 CEST	1.1.1.1	192.168.2.4	0xe76b	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.190363884 CEST	1.1.1.1	192.168.2.4	0xe76b	No error (0)	d2fashanjl7d9f.cloudfront.net		18.64.174.9	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.190363884 CEST	1.1.1.1	192.168.2.4	0xe76b	No error (0)	d2fashanjl7d9f.cloudfront.net		18.64.174.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.190363884 CEST	1.1.1.1	192.168.2.4	0xe76b	No error (0)	d2fashanjl7d9f.cloudfront.net		18.64.174.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.190363884 CEST	1.1.1.1	192.168.2.4	0xe76b	No error (0)	d2fashanjl7d9f.cloudfront.net		18.64.174.13	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.191206932 CEST	1.1.1.1	192.168.2.4	0x3adb	No error (0)	rules.quantcount.com	d2fashanjl7d9f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.194487095 CEST	1.1.1.1	192.168.2.4	0x25a0	No error (0)	api.company-target.com		13.35.116.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.194487095 CEST	1.1.1.1	192.168.2.4	0x25a0	No error (0)	api.company-target.com		13.35.116.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.194487095 CEST	1.1.1.1	192.168.2.4	0x25a0	No error (0)	api.company-target.com		13.35.116.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.194487095 CEST	1.1.1.1	192.168.2.4	0x25a0	No error (0)	api.company-target.com		13.35.116.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.196964025 CEST	1.1.1.1	192.168.2.4	0x1d83	No error (0)	tag-logger.demandbase.com		13.32.87.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.196964025 CEST	1.1.1.1	192.168.2.4	0x1d83	No error (0)	tag-logger.demandbase.com		13.32.87.74	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.196964025 CEST	1.1.1.1	192.168.2.4	0x1d83	No error (0)	tag-logger.demandbase.com		13.32.87.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.196964025 CEST	1.1.1.1	192.168.2.4	0x1d83	No error (0)	tag-logger.demandbase.com		13.32.87.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.307884932 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	q.quora.com		52.200.166.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.307884932 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	q.quora.com		52.200.154.95	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.307884932 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	q.quora.com		52.21.40.167	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.307884932 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	q.quora.com		52.3.212.252	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.307884932 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	q.quora.com		52.45.52.13	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.314498901 CEST	1.1.1.1	192.168.2.4	0x1e79	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.314498901 CEST	1.1.1.1	192.168.2.4	0x1e79	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315231085 CEST	1.1.1.1	192.168.2.4	0x980e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:06.315433979 CEST	1.1.1.1	192.168.2.4	0x5fc4	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.226.174.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.158.64.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.315983057 CEST	1.1.1.1	192.168.2.4	0x71e2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:06.510972977 CEST	1.1.1.1	192.168.2.4	0x3c7b	No error (0)	capi.squareup.com		18.144.72.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.077200890 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	arttrk.com		44.208.37.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.077200890 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	arttrk.com		52.22.38.2	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.077200890 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	arttrk.com		52.200.221.235	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.077200890 CEST	1.1.1.1	192.168.2.4	0xd7bd	No error (0)	arttrk.com		52.3.125.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202089071 CEST	1.1.1.1	192.168.2.4	0x5b00	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202204943 CEST	1.1.1.1	192.168.2.4	0x335e	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202204943 CEST	1.1.1.1	192.168.2.4	0x335e	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202204943 CEST	1.1.1.1	192.168.2.4	0x335e	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202204943 CEST	1.1.1.1	192.168.2.4	0x335e	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.202204943 CEST	1.1.1.1	192.168.2.4	0x335e	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.296725035 CEST	1.1.1.1	192.168.2.4	0x9fa4	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.297568083 CEST	1.1.1.1	192.168.2.4	0x6237	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.511446953 CEST	1.1.1.1	192.168.2.4	0x9590	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.512197018 CEST	1.1.1.1	192.168.2.4	0xe3d6	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.512197018 CEST	1.1.1.1	192.168.2.4	0xe3d6	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.512197018 CEST	1.1.1.1	192.168.2.4	0xe3d6	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.512590885 CEST	1.1.1.1	192.168.2.4	0xcd74	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.512590885 CEST	1.1.1.1	192.168.2.4	0xcd74	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.547702074 CEST	1.1.1.1	192.168.2.4	0x386e	No error (0)	tag-logger.demandbase.com		13.32.87.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.547702074 CEST	1.1.1.1	192.168.2.4	0x386e	No error (0)	tag-logger.demandbase.com		13.32.87.74	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.547702074 CEST	1.1.1.1	192.168.2.4	0x386e	No error (0)	tag-logger.demandbase.com		13.32.87.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.547702074 CEST	1.1.1.1	192.168.2.4	0x386e	No error (0)	tag-logger.demandbase.com		13.32.87.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.23.126.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.236.114.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.233.2.13	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.548904896 CEST	1.1.1.1	192.168.2.4	0x5f6e	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.158.64.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.549854040 CEST	1.1.1.1	192.168.2.4	0x65d4	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.562592030 CEST	1.1.1.1	192.168.2.4	0x6b9e	No error (0)	cnv.event.prod.bidr.io	global.event.prod.bidr.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	cnv.event.prod.bidr.io	global.event.prod.bidr.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	global.event.prod.bidr.io		54.144.182.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	global.event.prod.bidr.io		54.156.246.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	global.event.prod.bidr.io		52.73.200.224	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	global.event.prod.bidr.io		54.146.151.104	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.564482927 CEST	1.1.1.1	192.168.2.4	0x7394	No error (0)	global.event.prod.bidr.io		52.73.104.2	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.674999952 CEST	1.1.1.1	192.168.2.4	0xa1ee	No error (0)	capi.squareup.com		18.144.72.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.727982998 CEST	1.1.1.1	192.168.2.4	0x17e7	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.729082108 CEST	1.1.1.1	192.168.2.4	0xe852	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.729082108 CEST	1.1.1.1	192.168.2.4	0xe852	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.762061119 CEST	1.1.1.1	192.168.2.4	0xc276	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:07.762061119 CEST	1.1.1.1	192.168.2.4	0xc276	No error (0)	star-mini.c10r.facebook.com		157.240.14.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:07.763382912 CEST	1.1.1.1	192.168.2.4	0xfc59	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.143568039 CEST	1.1.1.1	192.168.2.4	0xf2b9	No error (0)	analytics.google.com		192.178.50.78	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.149020910 CEST	1.1.1.1	192.168.2.4	0x7eb9	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.149020910 CEST	1.1.1.1	192.168.2.4	0x7eb9	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.150845051 CEST	1.1.1.1	192.168.2.4	0xcc51	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 26, 2024 06:12:08.268201113 CEST	1.1.1.1	192.168.2.4	0xef69	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.268201113 CEST	1.1.1.1	192.168.2.4	0xef69	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.268201113 CEST	1.1.1.1	192.168.2.4	0xef69	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.268201113 CEST	1.1.1.1	192.168.2.4	0xef69	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.268201113 CEST	1.1.1.1	192.168.2.4	0xef69	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.268582106 CEST	1.1.1.1	192.168.2.4	0xfb7c	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.339400053 CEST	1.1.1.1	192.168.2.4	0xd7a0	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.427575111 CEST	1.1.1.1	192.168.2.4	0x830e	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.427575111 CEST	1.1.1.1	192.168.2.4	0x830e	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.427575111 CEST	1.1.1.1	192.168.2.4	0x830e	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.428683996 CEST	1.1.1.1	192.168.2.4	0xd2f3	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.428683996 CEST	1.1.1.1	192.168.2.4	0xd2f3	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.446255922 CEST	1.1.1.1	192.168.2.4	0x71e3	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 06:12:08.446325064 CEST	1.1.1.1	192.168.2.4	0x6d49	No error (0)	ad.doubleclick.net		172.217.3.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.893270969 CEST	1.1.1.1	192.168.2.4	0x90a8	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:08.893270969 CEST	1.1.1.1	192.168.2.4	0x90a8	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.893270969 CEST	1.1.1.1	192.168.2.4	0x90a8	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.893270969 CEST	1.1.1.1	192.168.2.4	0x90a8	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.893270969 CEST	1.1.1.1	192.168.2.4	0x90a8	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:08.894968033 CEST	1.1.1.1	192.168.2.4	0xe360	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.119476080 CEST	1.1.1.1	192.168.2.4	0x9f35	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.120497942 CEST	1.1.1.1	192.168.2.4	0xf7d0	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.120497942 CEST	1.1.1.1	192.168.2.4	0xf7d0	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.120497942 CEST	1.1.1.1	192.168.2.4	0xf7d0	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.154788971 CEST	1.1.1.1	192.168.2.4	0x185	No error (0)	us-central1-sq-sgtm-prod.cloudfunctions.net		216.239.36.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.169836044 CEST	1.1.1.1	192.168.2.4	0x934	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.170049906 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.170049906 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.170049906 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.170049906 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.170049906 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	cnv.event.prod.bidr.io	global.event.prod.bidr.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	global.event.prod.bidr.io		54.144.182.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	global.event.prod.bidr.io		52.73.200.224	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	global.event.prod.bidr.io		54.156.246.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	global.event.prod.bidr.io		54.146.151.104	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293562889 CEST	1.1.1.1	192.168.2.4	0x10c1	No error (0)	global.event.prod.bidr.io		52.73.104.2	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.293843985 CEST	1.1.1.1	192.168.2.4	0x39e3	No error (0)	cnv.event.prod.bidr.io	global.event.prod.bidr.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508151054 CEST	1.1.1.1	192.168.2.4	0x1fc1	No error (0)	tags.w55c.net	geotags.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508151054 CEST	1.1.1.1	192.168.2.4	0x1fc1	No error (0)	geotags.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	tags.w55c.net	geotags.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	geotags.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		52.205.65.239	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		54.166.33.239	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		54.205.149.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.508740902 CEST	1.1.1.1	192.168.2.4	0xfadb	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769188881 CEST	1.1.1.1	192.168.2.4	0x1ee4	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769188881 CEST	1.1.1.1	192.168.2.4	0x1ee4	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769188881 CEST	1.1.1.1	192.168.2.4	0x1ee4	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769188881 CEST	1.1.1.1	192.168.2.4	0x1ee4	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769188881 CEST	1.1.1.1	192.168.2.4	0x1ee4	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.769754887 CEST	1.1.1.1	192.168.2.4	0x3926	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.911900043 CEST	1.1.1.1	192.168.2.4	0xf37c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.912045002 CEST	1.1.1.1	192.168.2.4	0x7e20	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.912045002 CEST	1.1.1.1	192.168.2.4	0x7e20	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.912045002 CEST	1.1.1.1	192.168.2.4	0x7e20	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.949357986 CEST	1.1.1.1	192.168.2.4	0xf6a3	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.964004993 CEST	1.1.1.1	192.168.2.4	0x6c21	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.965121031 CEST	1.1.1.1	192.168.2.4	0x181f	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.965121031 CEST	1.1.1.1	192.168.2.4	0x181f	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.965121031 CEST	1.1.1.1	192.168.2.4	0x181f	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.965121031 CEST	1.1.1.1	192.168.2.4	0x181f	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.965121031 CEST	1.1.1.1	192.168.2.4	0x181f	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966579914 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966579914 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966579914 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966579914 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966579914 CEST	1.1.1.1	192.168.2.4	0xe709	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:09.966800928 CEST	1.1.1.1	192.168.2.4	0xa5ed	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:10.424655914 CEST	1.1.1.1	192.168.2.4	0xaea6	No error (0)	trc-events.taboola.com	us-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:10.424655914 CEST	1.1.1.1	192.168.2.4	0xaea6	No error (0)	us-vip001.taboola.com		141.226.224.48	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:10.425185919 CEST	1.1.1.1	192.168.2.4	0x7885	No error (0)	trc-events.taboola.com	us-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.022619963 CEST	1.1.1.1	192.168.2.4	0x405b	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.023071051 CEST	1.1.1.1	192.168.2.4	0xa35e	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.024152994 CEST	1.1.1.1	192.168.2.4	0x601b	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.024820089 CEST	1.1.1.1	192.168.2.4	0xcf34	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056624889 CEST	1.1.1.1	192.168.2.4	0x65f2	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056624889 CEST	1.1.1.1	192.168.2.4	0x65f2	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056624889 CEST	1.1.1.1	192.168.2.4	0x65f2	No error (0)	global.px.quantserve.com		192.184.68.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056624889 CEST	1.1.1.1	192.168.2.4	0x65f2	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056624889 CEST	1.1.1.1	192.168.2.4	0x65f2	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.056777000 CEST	1.1.1.1	192.168.2.4	0x8749	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.670242071 CEST	1.1.1.1	192.168.2.4	0x4aad	No error (0)	segments.company-target.com		13.35.116.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.670242071 CEST	1.1.1.1	192.168.2.4	0x4aad	No error (0)	segments.company-target.com		13.35.116.51	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.670242071 CEST	1.1.1.1	192.168.2.4	0x4aad	No error (0)	segments.company-target.com		13.35.116.107	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.670242071 CEST	1.1.1.1	192.168.2.4	0x4aad	No error (0)	segments.company-target.com		13.35.116.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:11.951780081 CEST	1.1.1.1	192.168.2.4	0x9c6	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.951999903 CEST	1.1.1.1	192.168.2.4	0x12e5	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.965831041 CEST	1.1.1.1	192.168.2.4	0x8ca5	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.966975927 CEST	1.1.1.1	192.168.2.4	0x3da2	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.969583988 CEST	1.1.1.1	192.168.2.4	0xff84	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:11.970076084 CEST	1.1.1.1	192.168.2.4	0xeb3	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		50.19.89.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		184.72.105.205	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		3.228.185.195	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		52.86.181.185	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		34.198.52.31	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.088700056 CEST	1.1.1.1	192.168.2.4	0x71	No error (0)	api.sprig.com		54.235.101.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.449629068 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	segments.company-target.com		13.35.116.107	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.449629068 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	segments.company-target.com		13.35.116.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.449629068 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	segments.company-target.com		13.35.116.51	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.449629068 CEST	1.1.1.1	192.168.2.4	0x9e5e	No error (0)	segments.company-target.com		13.35.116.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:12.904295921 CEST	1.1.1.1	192.168.2.4	0xaa76	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:12.940891981 CEST	1.1.1.1	192.168.2.4	0x3ef2	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		3.228.185.195	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		34.198.52.31	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		52.86.181.185	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		50.19.89.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		184.72.105.205	A (IP address)	IN (0x0001)	false
Apr 26, 2024 06:12:13.822681904 CEST	1.1.1.1	192.168.2.4	0x9755	No error (0)	api.sprig.com		54.235.101.7	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.011975050 CEST	456	OUT	GET /contact.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.271404028 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:47 GMT Server: Apache Set-Cookie: is_mobile=0; path=/; domain=www.painrehabilitation.com.au Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:10:47 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"8053e048fac939ead127dd802dfa270a-gzip" Content-Encoding: gzip X-Host: grn54.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7518 Keep-Alive: timeout=10, max=60 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f ed f7 f6 3f a0 99 19 53 ee d6 41 dd d6 99 71 1c a7 3b f3 72 b8 63 67 b2 f3 e2 ac 1e 44 42 12 13 8a 64 48 ca 8e c6 d1 7f df 2a 00 bc 24 d2 96 e2 a4 a7 67 d7 3d 13 91 04 0a 85 2a a0 50 a8 c2 51 ee ff f4 f4 f5 c9 c5 3f cf 4e c9 2c 98 5b c3 fd 3e 3e 88 45 ed e9 40 61 b6 32 dc df eb cf 18 35 e0 b9 d7 0f cc c0 62 c3 13 c7 0e a8 1e 90 12 79 e2 99 fe 98 da 8c 9c 51 d3 26 6f d8 8c 8e 4d cb 0c 68 60 3a 36 39 67 de 95 a9 b3 7e 45 94 ea cf 59 40 89 eb 39 2e f3 82 e5 40 71 a6 5d df 0c d8 c8 a6 73 a6 10 1d 70 32 3b 18 28 db a0 54 48 05 e8 dc c4 c7 2b 4a e0 92 84 e6 81 1b cc d7 3d d3 45 cc c9 42 d4 76 7c 9f 92 33 cf bc a2 01 23 bf 39 be 0b f5 5b a4 da ea 00 01 57 00 c4 98 4d 5e 9a 16 23 6f 1c fd 93 0f bf d4 20 af bf 58 6c 49 7e 7f f1 94 34 b4 76 33 af 4a 73 4e a7 49 0a 67 41 e0 76 2b 95 eb eb eb b2 0b fc 7a 29 76 cb ba 33 2f d3 45 65 e1 5a 50 83 5f a9 56 b4 4a bd d2 aa 54 b5 7a ab 5e 3d 6a 56 9a cd 3a bc 75 ca 1f dd e9 1f 54 61 a7 de 69 b7 1b 58 e1 e3 5a 53 fb 63 2a 1d bb 9e 5f b2 9c a9 73 1b 9f 0b cf da b5 42 5d 48 47 19 e5 9d a3 85 ff 04 66 2c 5e 62 9f 17 e6 95 90 21 c0 59 ba 58 ba 49 96 02 f6 25 a8 60 c9 1e d1 67 d4 f3 59 30 58 04 93 d2 91 12 91 87 72 3d 50 ae 4c 76 ed 3a 5e 90 28 7a 6d 1a c1 6c 60 30 94 e4 12 ff 28 12 d3 36 03 93 5a 25 5f a7 16 1b 54 cb 5a 71 0e 49 73 48 59 98 30 04 61 ec e1 f0 b3 4c fb 13 31 0d 40 81 23 a7 34 a6 3e 2b f9 c1 12 65 de 63 d6 40 e1 ef fe 8c 31 a8 2e 00 7a 25 99 ba ef 2b 64 e6 b1 c9 40 a9 54 74 c3 ae 95 99 61 06 f3 25 22 c1 c6 40 80 0a 7e f8 65 78 7b 3c 5e 98 96 71 61 02 f5 d5 56 a3 51 6f 55 8f 1a 35 d1 ec bc fe 7b d7 e4 58 46 65 42 6d 7d 39 76 be f0 0a 7f 4c 35 be a3 63 8b 9a d0 ee 09 be 82 75 be e6 50 94 42 4d ba 07 a3 ba 08 32 f5 91 e9 42 23 ec 4c ca 04 54 82 5f 99 83 c0 8d 38 74 cc 5c bb 0d ca 03 ca a1 7e 0a 7b 2f 98 b1 39 2b f1 f2 51 4d 1c 91 5a a9 4c 40 56 fc f2 d4 71 a6 16 a3 ae e9 87 4c 3d 9e d0 b9 69 2d 07 27 20 ce 76 b7 a1 69 c5 36 fc 83 27 2a 28 53 c7 2f f1 76 e0 2f c6 28 93 16 48 bc 5d e4 bf 25 20 57 e5 bc a8 31 2f aa e0 45 0d 79 51 77 a7 e5 25 e6 33 cf a3 41 48 d0 bd 2a df ef 73 80 f5 ac e1 7e 59 34 1b b3 a0 d9 90 22 f1 69 3b 41 69 e2 38 01 f3 ba f0 5a 90 a9 Data Ascii: =iw8?SAq;rcgDBdH$g=PQ?N,[>>E@a25byQ&oMh`:69g~EY@9.@q]sp2;(TH+J=EBv\|3#9[WM^#o XlI~4v3JsNIgAv+z)v3/EeZP_VJTz^=jV:uTaiXZSc_sB]HGf,^b!YXI%`gY0Xr=PLv:^(zml`0(6Z%_TZqIsHY0aL1@#4>+ec@1.z%+d@Tta%"@~ex{<^qaVQoU5{XFeBm}9vL5cuPBM2B#LT_8t\~{/9+QMZL@VqL=i-' vi6'(S/v/(H]% W1/EyQw%3AH*s~Y4"i;Ai8Z
Apr 26, 2024 06:10:47.271419048 CEST	79	IN	Data Raw: 38 61 31 2f 82 3d 24 86 79 05 9a c0 a3 53 8f ba 30 dc ee 85 cb bd 67 f9 32 08 99 b1 d0 83 d2 d8 82 e9 23 fe e4 d2 f1 bd 70 27 e6 b6 fb a2 14 e9 13 c7 9b 97 26 26 b3 0c b0 0d c6 cc fa 51 58 1f 89 0c a9 2d d7 3b 6e 2d d7 dd 48 b9 a3 71 f3 Data Ascii: 8a1/=$yS0g2#p'&&QX-;n-Hq
Apr 26, 2024 06:10:47.271497011 CEST	1289	IN	Data Raw: a0 53 cd b5 0e b4 25 a9 f9 0d 05 b4 4c 4b be 69 b0 31 f5 36 44 31 95 e9 ae 27 6c 89 34 07 8c dc ac f6 1f 1a f4 3b 37 68 b6 dc 0b 99 df 4e d1 48 d8 5c 45 22 f3 bf 49 51 ac 97 dd 42 11 84 45 76 1b e8 b7 97 ca 6d a7 2d f5 c3 ac f6 bd 34 a1 e5 d8 d3 Data Ascii: S%LKi16D1'l4;7hNH\E"IQBEvm-4d-Mg5F`&Ag@Z{A6 Se;&LPB2RCSQ8*eD$=m]B;?UMb(!@;I$0GY1=`\|aGH'mt)V9x"D"
Apr 26, 2024 06:10:47.271511078 CEST	79	IN	Data Raw: e0 07 f2 f4 e5 99 63 99 fa f2 ad 67 21 98 80 01 fe 46 3a 2f 1c 9c 83 d1 81 19 cd 7a b5 d5 6c 1e b5 db 9d 46 1d ec 8d ba 56 8b 41 17 3e f3 9e 3f 45 a8 d0 2c 57 7a db 5a 22 d8 3c 8e 3d 31 a7 4f 1d 34 6d 10 09 36 fa 35 63 63 6b 89 0d bd 89 Data Ascii: cg!F:/zlFVA>?E,WzZ"<=1O4m65cck
Apr 26, 2024 06:10:47.271612883 CEST	1289	IN	Data Raw: 0a cb 78 0c 7c a7 cf 0b d3 9f e1 90 49 25 14 0e 37 0d ab 3f c2 8a 0b a9 43 6a f8 59 a4 33 6b 01 26 0c c8 35 79 ff 61 eb f6 10 bc a0 07 aa cf a8 ec 94 d0 b0 c5 86 11 76 2d 27 31 02 43 ab 0b 28 54 36 e5 31 af 96 fe 4f a5 d2 fe 1e fe 2f 65 06 3e b3 Data Ascii: x\|I%7?CjY3k&5yav-'1C(T61O/e> l` &ey_n;4@+;V]?jjM-v@SXm/l @JBW#t)vlD[nZ^m7N';I1]m5j8j6GB3G}V??
Apr 26, 2024 06:10:47.271630049 CEST	79	IN	Data Raw: c4 cf 03 cb 94 94 b3 a2 6e 90 20 ce da a9 49 d7 27 26 1e 7e b7 a4 7d 42 75 36 76 9c 4f 21 fd c9 bd 9d 30 8f ef ee b8 fc 30 5b e8 dd 94 d0 bb 29 a5 bd 9b 92 f4 6e 4a 4f ce de 9c 57 6a 1a cc 7c d5 5a bd d6 6a b5 6b f5 e6 e3 09 a2 0f fc 9c Data Ascii: n I'&~}Bu6vO!00[)nJOWj\|Zjk
Apr 26, 2024 06:10:47.271656990 CEST	1289	IN	Data Raw: 36 78 16 91 91 6c 87 28 f5 1b da 42 bc 82 04 ec 24 31 c9 df 75 57 7a 2f 7a 8b 5d ea c4 4a 83 69 27 d7 25 52 22 97 38 2b 97 73 de 2d e5 be 47 48 a1 a5 81 af f4 e2 c5 26 f6 f0 a4 2b d9 38 73 99 79 70 9a 47 7c d9 40 22 4f 77 46 6a 80 43 64 82 a4 b1 Data Ascii: 6xl(B$1uWz/z]Ji'%R"8+s-GH&+8sypG\|@"OwFjCdC,iII<ihCMe<]N\6A:GmtECrYw,1tn'SBoH,gmL5(Y#vLv>5IY+:[Rm(Y-]E0(,I~2I-
Apr 26, 2024 06:10:47.271668911 CEST	79	IN	Data Raw: 34 aa 68 38 85 38 e5 8a 07 78 ce 9b 7e b2 18 2f d0 57 b3 de 95 e9 9b 7c c5 77 29 17 4e 43 27 fa df 62 6a fc 58 cd 82 4e da f7 50 2c da 9a 62 d1 d2 8a e5 f3 82 f9 58 83 4d 4d 8f ed a2 5c d6 63 35 3f 28 98 3f bb 82 49 1a f8 0d 65 78 e1 10 Data Ascii: 4h88x~/W\|w)NC'bjXNP,bXMM\c5?(?Iex
Apr 26, 2024 06:10:47.271739006 CEST	1289	IN	Data Raw: c6 6d 7f 16 f9 6a 13 d3 b2 c0 89 23 29 a1 20 f1 d1 b4 4d 61 51 86 bf 9d be 39 15 5b 1e 69 97 e5 c7 8c e9 6f b6 97 fe 23 97 f4 92 ab cc 59 bb 42 b7 ac 15 ef 25 5f c3 85 e0 68 65 37 15 06 39 0e 35 0d f5 fc 8d 4b 37 ee bd f1 fb 95 f2 0b 5d cb 2e 39 Data Ascii: mj#) MaQ9[io#YB%_he795K7].9%>b9.R%MM4']dHDecAWj*o+_;IM9$bw@UZ:_k-E+:7q[fbO\|#Yx:lj`l mKEl[bJttyH
Apr 26, 2024 06:10:47.271750927 CEST	79	IN	Data Raw: e4 f2 89 e2 ef 61 a0 8e 4e a7 08 7e 69 03 7f aa 45 22 be da f0 53 ad e2 0f 7f 6b 15 49 03 ff 69 f8 d1 91 90 02 fc 08 5f f0 a7 86 49 b5 46 94 89 b0 5a 53 96 ae 6a 9d 10 a4 da 4c 67 40 5a a3 2a f0 f3 ba 79 b5 5a 07 fb 94 8f 50 fb cc 7a 3d Data Ascii: aN~iE"SkIi_IFZSjLg@Z*yZPz=
Apr 26, 2024 06:10:47.271868944 CEST	1240	IN	Data Raw: 7e 83 71 60 c2 8e a3 9e 17 6b 3f 1c 5b aa 2a fc 51 8f 14 78 a4 20 48 d2 48 0f 9e 7d 02 b0 65 8b d9 53 30 db 21 e1 97 5f 44 ac 1d 2c e4 83 42 3a 0f 3c d3 9e 96 27 9e 33 3f 99 51 ef 04 ba 00 b1 a3 28 86 51 8b 3c b0 e2 3c 9b f8 38 b2 43 92 b0 b4 20 Data Ascii: ~q`k?[*Qx HH}eS0!_D,B:<'3?Q(Q<<8C m_0o-W!a/aDi H~2"a6!'w\A~stv{4"]9=,b.(p,]W#K{;,V?d!A2]SkE+CG
Apr 26, 2024 06:10:47.344775915 CEST	422	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:47.472527027 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:47 GMT Server: Apache Set-Cookie: is_mobile=0; path=/; domain=www.painrehabilitation.com.au Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:10:47 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"8053e048fac939ead127dd802dfa270a-gzip" Content-Encoding: gzip X-Host: grn54.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7518 Keep-Alive: timeout=10, max=60 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f ed f7 f6 3f a0 99 19 53 ee d6 41 dd d6 99 71 1c a7 3b f3 72 b8 63 67 b2 f3 e2 ac 1e 44 42 12 13 8a 64 48 ca 8e c6 d1 7f df 2a 00 bc 24 d2 96 e2 a4 a7 67 d7 3d 13 91 04 0a 85 2a a0 50 a8 c2 51 ee ff f4 f4 f5 c9 c5 3f cf 4e c9 2c 98 5b c3 fd 3e 3e 88 45 ed e9 40 61 b6 32 dc df eb cf 18 35 e0 b9 d7 0f cc c0 62 c3 13 c7 0e a8 1e 90 12 79 e2 99 fe 98 da 8c 9c 51 d3 26 6f d8 8c 8e 4d cb 0c 68 60 3a 36 39 67 de 95 a9 b3 7e 45 94 ea cf 59 40 89 eb 39 2e f3 82 e5 40 71 a6 5d df 0c d8 c8 a6 73 a6 10 1d 70 32 3b 18 28 db a0 54 48 05 e8 dc c4 c7 2b 4a e0 92 84 e6 81 1b cc d7 3d d3 45 cc c9 42 d4 76 7c 9f 92 33 cf bc a2 01 23 bf 39 be 0b f5 5b a4 da ea 00 01 57 00 c4 98 4d 5e 9a 16 23 6f 1c fd 93 0f bf d4 20 af bf 58 6c 49 7e 7f f1 94 34 b4 76 33 af 4a 73 4e a7 49 0a 67 41 e0 76 2b 95 eb eb eb b2 0b fc 7a 29 76 cb ba 33 2f d3 45 65 e1 5a 50 83 5f a9 56 b4 4a bd d2 aa 54 b5 7a ab 5e 3d 6a 56 9a cd 3a bc 75 ca 1f dd e9 1f 54 61 a7 de 69 b7 1b 58 e1 e3 5a 53 fb 63 2a 1d bb 9e 5f b2 9c a9 73 1b 9f 0b cf da b5 42 5d 48 47 19 e5 9d a3 85 ff 04 66 2c 5e 62 9f 17 e6 95 90 21 c0 59 ba 58 ba 49 96 02 f6 25 a8 60 c9 1e d1 67 d4 f3 59 30 58 04 93 d2 91 12 91 87 72 3d 50 ae 4c 76 ed 3a 5e 90 28 7a 6d 1a c1 6c 60 30 94 e4 12 ff 28 12 d3 36 03 93 5a 25 5f a7 16 1b 54 cb 5a 71 0e 49 73 48 59 98 30 04 61 ec e1 f0 b3 4c fb 13 31 0d 40 81 23 a7 34 a6 3e 2b f9 c1 12 65 de 63 d6 40 e1 ef fe 8c 31 a8 2e 00 7a 25 99 ba ef 2b 64 e6 b1 c9 40 a9 54 74 c3 ae 95 99 61 06 f3 25 22 c1 c6 40 80 0a 7e f8 65 78 7b 3c 5e 98 96 71 61 02 f5 d5 56 a3 51 6f 55 8f 1a 35 d1 ec bc fe 7b d7 e4 58 46 65 42 6d 7d 39 76 be f0 0a 7f 4c 35 be a3 63 8b 9a d0 ee 09 be 82 75 be e6 50 94 42 4d ba 07 a3 ba 08 32 f5 91 e9 42 23 ec 4c ca 04 54 82 5f 99 83 c0 8d 38 74 cc 5c bb 0d ca 03 ca a1 7e 0a 7b 2f 98 b1 39 2b f1 f2 51 4d 1c 91 5a a9 4c 40 56 fc f2 d4 71 a6 16 a3 ae e9 87 4c 3d 9e d0 b9 69 2d 07 27 20 ce 76 b7 a1 69 c5 36 fc 83 27 2a 28 53 c7 2f f1 76 e0 2f c6 28 93 16 48 bc 5d e4 bf 25 20 57 e5 bc a8 31 2f aa e0 45 0d 79 51 77 a7 e5 25 e6 33 cf a3 41 48 d0 bd 2a df ef 73 80 f5 ac e1 7e 59 34 1b b3 a0 d9 90 22 f1 69 3b 41 69 e2 38 01 f3 ba f0 5a 90 a9 Data Ascii: =iw8?SAq;rcgDBdH$g=PQ?N,[>>E@a25byQ&oMh`:69g~EY@9.@q]sp2;(TH+J=EBv\|3#9[WM^#o XlI~4v3JsNIgAv+z)v3/EeZP_VJTz^=jV:uTaiXZSc_sB]HGf,^b!YXI%`gY0Xr=PLv:^(zml`0(6Z%_TZqIsHY0aL1@#4>+ec@1.z%+d@Tta%"@~ex{<^qaVQoU5{XFeBm}9vL5cuPBM2B#LT_8t\~{/9+QMZL@VqL=i-' vi6'(S/v/(H]% W1/EyQw%3AH*s~Y4"i;Ai8Z
Apr 26, 2024 06:10:47.572105885 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:47 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn38.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 63 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZc
Apr 26, 2024 06:10:47.806710005 CEST	475	OUT	GET /uploads/1/0/3/6/10363185/bprs-logo.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:48.037091017 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:47 GMT Content-Type: image/jpeg Content-Length: 17218 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:22 GMT x-rgw-object-type: Normal ETag: "369512fff14fff9fdf18a74f89a016fd" x-amz-request-id: tx00000c6be2cfcc40192d5-0065dabbf9-e8f44ee-sfo1 X-Storage-Bucket: za948 X-Storage-Object: a948c0a77c5c9a6711fd0d05cfce0f7b8ba9f1ec100796a67c773cc3eef923bf Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 64 02 32 03 01 11 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 09 01 04 05 03 02 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 04 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 da 98 00 00 00 00 00 00 00 00 00 00 1f 93 5f 29 d8 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 5f b6 fa 6c 7b 3e 00 3d bc 39 e7 9d 56 db bf 4b c2 9b 3d 56 0f eb f2 01 ec 62 cd 3b ea 76 de 9d 32 41 9b 5d 4e 21 e9 f2 81 df a6 49 cf 55 b5 c8 70 e7 18 57 a7 cb 5b 77 9a 3c 6b 36 0c bf cf e9 b2 ba 3d ee 51 83 3f e4 d7 62 db 15 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 c0 81 23 f8 36 1b 56 e0 3e 81 af 1e c7 8c ae 1b dd 10 03 38 f1 fb 76 a1 c0 77 fa f2 ec f8 c8 13 71 a6 00 7b 78 73 6d 57 e7 df 42 fc 1a aa fa 17 cf 7c 7c b8 78 39 32 9f 37 a7 6c df 3c fa 2f a5 8f 26 bb 16 d8 aa b1 fc 4d 70 95 8d 9a c8 31 35 ca 26 c5 4d 7f 69 ad 49 b2 8a f2 90 00 e4 15 e6 b3 83 5a 2d da 3f 69 86 ab 39 dd eb 95 44 8e 40 00 00 00 00 03 83 56 7d f7 cf e2 9d 96 b6 72 d4 6d e4 df 07 be a0 74 dc c8 da 1f 03 df d4 be 87 9d ae 1b dd 14 93 e0 f7 d9 9d 0e fe 8f 75 bc 97 08 be 7c 87 61 03 ed f5 10 26 e3 4d 2a eb 76 56 6f 45 be a2 9d 77 23 f2 9a de 4e 4b ad ea da 29 2f 57 c9 e7 de 2f 6e cc 78 5e ef 55 3f 41 f9 ef 8d 9b 0e c9 f8 7e ea 7a d3 ee 35 d8 b6 c5 55 a8 d4 b6 bc ec 9a 2d 5f 36 2d 85 4c 59 f3 1b 45 78 a6 49 5a f4 9c 6a 88 6d 19 fd 2d 12 da 2c 19 06 4b 68 aa ea 2b 16 6f 0a f5 9d 2d 4c 1a 27 38 ac f3 6a e0 c9 bf 16 a4 d9 5b 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 b6 bb 9d Data Ascii: JFIF&""&0-0>>T) )/'%'/9339GDG]]}d26_)B_l{>=9VK=Vb;v2A]N!IUpW[w<k6=Q?bT#6V>8vwq{xsmWB\|\|x927l</&Mp15&MiIZ-?i9D@V}rmtu\|a&M*vVoEw#NK)/W/nx^U?A~z5U-_6-LYExIZjm-,Kh+o-L'8j[
Apr 26, 2024 06:10:48.490434885 CEST	477	OUT	GET /uploads/1/0/3/6/10363185/5939774.jpg?250 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:48.719360113 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:48 GMT Content-Type: image/jpeg Content-Length: 10187 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:01:10 GMT x-rgw-object-type: Normal ETag: "135e61a61184cb0ceca5447677b64d5a" x-amz-request-id: tx0000039b5ac8ca5d0c640-0065da90cc-e95274c-sfo1 X-Storage-Bucket: z86cc X-Storage-Object: 86cc78e492048dabf9309af79c2504ca65dc7dd5d071259060517ae4bd494de8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a6 00 fa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 06 07 04 05 08 09 0a ff c4 00 41 10 00 01 03 04 01 03 02 04 04 02 07 07 03 05 00 00 01 02 03 04 00 05 06 11 07 08 12 21 13 31 09 22 41 51 14 61 71 81 15 32 0a 16 17 23 91 a1 b1 24 42 43 52 62 c1 f0 18 34 d1 44 82 83 b2 c2 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 07 08 06 ff c4 00 33 11 00 02 02 00 04 02 08 06 02 02 03 01 00 00 00 00 00 01 02 11 03 12 21 31 41 51 04 61 71 81 91 a1 b1 f0 05 13 22 32 c1 d1 06 52 23 f1 14 42 82 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb f9 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 2a 09 1e 4e a8 09 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 82 b0 2a 5a 07 5c fe 4f 6f 8b 79 6a dc e4 e8 68 b8 be 92 b6 a2 a9 f4 07 9d 48 1b 25 28 df 71 00 79 3a 15 9c ea eb 89 69 d5 9a 0f 96 3e 28 9c 4d c4 1d 45 d9 b8 9e 64 ec 8e e5 9f df ae 08 b6 c5 b5 5b ac 32 9d 2a 75 41 2a 27 d5 52 12 d2 90 94 28 29 45 2b 56 80 3f 5f 15 2e 51 a5 95 eb c7 87 8b 0a b7 b5 f9 3c e1 d5 1f c7 7a 5f 05 f2 a7 2d 62 51 78 fb 1e b6 ce e1 fe d7 67 7f 5b f3 16 ac ef 64 0d 2f cb 5f c3 58 4b 4e 2a 42 9c 4f 6a 92 9d 83 a5 a7 60 6e b1 29 4d 5a 6d 2e 57 6e fc 11 a5 97 93 7e 06 bd eb ff 00 e2 39 cd 36 bb 5f 4e f9 fe 3f 3a fb 80 f1 07 37 db 5a 8b Data Ascii: JFIFHHCCA!1"AQaq2#$BCRb4D3!1AQaq"2R#B?@(P@(P@(P@(P@(P@(P@(NP@(P@(P@(Z\OoyjhH%(qy:i>(MEd[2uA'R()E+V?_.Q<z_-bQxg[d/_XKN*BOj`n)MZm.Wn~96_N?:7Z
Apr 26, 2024 06:10:49.566191912 CEST	409	OUT	GET /files/theme/plugins.js?1530561231 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:49.797596931 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Wed, 05 Oct 2022 17:45:05 GMT x-rgw-object-type: Normal ETag: W/"a8bf2ebe41b28e96d5d8deb2b83e0ee3" x-amz-request-id: tx00000dc037c5a61a7b3d3-0065da4287-e8f4575-sfo1 X-Storage-Bucket: z2829 X-Storage-Object: 2829e73e900aef1b3608efa7458c3cfc249e334cd561b2d33ecd84a6ef189cf8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 34 61 33 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d fb 5b 1b 57 b2 e0 ef fe 2b da 7c bb 41 4a 84 00 4f 32 5f 46 84 64 1c 8c 13 ee b5 0d 6b 70 c6 be 2c 9f d3 48 0d 74 2c d4 9a ee 16 a0 09 fc ef 5b 8f f3 a8 f3 e8 96 64 3b 33 73 77 97 f9 26 56 77 9f 67 9d 3a f5 3a 75 aa 1e 6d 7e f9 38 f9 39 bd be ce ca fe 7f 1c 27 1b c9 cd 93 fe 56 ff 6b f8 f1 64 6b fb eb 8d ad bf 6c 3c f9 f6 51 f2 65 72 55 d7 d3 c1 e6 e6 15 95 fc ad ea 5f e6 f5 d5 ec bc 9f 17 9b f0 15 0b ec 15 d3 79 99 5f 5e d5 49 67 d8 a5 ca c9 7f 14 65 fe 21 39 49 27 97 d9 78 94 95 3b 58 ec 45 3e cc 26 55 36 4a 66 13 78 95 d4 57 59 f2 f2 e0 24 19 f3 eb e4 cb cd 47 9d 8b d9 64 58 e7 c5 a4 73 9b 4f 46 c5 6d 2f 19 15 c3 d9 75 36 a9 7b 49 76 37 2d ca fa 55 7a 9d f5 a8 81 8b 7c 92 8d ba c9 ef 8f 92 64 7d 06 d5 ab ba cc 87 f5 fa ce a3 47 37 69 99 fc b2 ff ea d9 e1 eb f7 47 af f7 9f 1f bc dd 3f 4e 76 93 d3 f5 f5 5e b2 7e 9b 9d 7f c8 6b fc 75 5d fc 03 ff 79 79 4c 0f 15 fe b7 58 3f db a1 da 27 fb c7 27 ef f7 5f ec bf dc 7f 75 02 55 f5 20 fa c3 32 4b eb 6c 7f 9c e1 53 67 7d 94 df ac 77 55 87 27 ef 8e f6 df 3f 7f f3 6a ef e4 e0 f0 15 d4 59 d7 53 d1 23 2a 0b 18 35 7c 78 99 d6 57 7d 7a e0 be d2 f3 4a bf 85 9f fc 6e 52 dc c2 bb 67 d0 57 1f 7e 42 03 9b 5f 12 a0 ab ac 4e d2 a4 ce af b3 62 56 27 b7 b0 0e f0 78 99 df 64 93 a4 1a 16 d3 0c cb fc 75 9a 96 e9 75 f2 fb 73 d5 ff 43 72 31 91 ef 5f cd ae cf b3 f2 41 b7 22 3f 1d 9e ff 96 0d eb 87 64 58 4c ea ec 8e 3f 95 59 3d 2b 27 55 f2 fb 84 eb 3d c2 75 d2 73 c3 01 9d 70 3b 7b 5c a7 73 31 e9 e9 a6 7b ba 21 5e a5 24 e1 b6 44 a5 ce 39 2c f3 f3 09 55 d2 65 4d 75 80 ec 83 99 79 7e 41 f8 92 96 97 b4 12 49 5e 25 e9 04 1e cb 74 de 4b 6e b3 e4 36 85 97 75 01 58 92 0d 67 75 46 85 2f 26 09 0c 31 4b 87 57 09 54 29 e7 aa 9d 1c 60 98 43 69 5d 1f ab 8f 60 9d 6a d3 c8 a8 40 28 5f e5 93 cb 3e d6 81 5f 15 76 38 43 dc 3d 9f 27 e9 78 4c ed 5f 67 f5 55 31 aa e0 77 0a ad 0d 87 d9 14 57 a7 82 6a 63 18 29 Data Ascii: 4a34}[W+\|AJO2_Fdkp,Ht,[d;3sw&Vwg::um~89'Vkdkl<QerU_y_^Ige!9I'x;XE>&U6JfxWY$GdXsOFm/u6{Iv7-Uz\|d}G7iG?Nv^~ku]yyLX?''_uU 2KlSg}wU'?jYS#*5\|xW}zJnRgW~B_NbV'xduusCr1_A"?dXL?Y=+'U=usp;{\s1{!^$D9,UeMuy~AI^%tKn6uXguF/&1KWT)`Ci]`j@(_>_v8C='xL_gU1wWjc)
Apr 26, 2024 06:10:51.277724981 CEST	738	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:10:51.606898069 CEST	628	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:51 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn86.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=56 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:10:59.810312986 CEST	734	OUT	GET /uploads/1/0/3/6/10363185/8109833.jpg?250 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:11:00.041064978 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:59 GMT Content-Type: image/jpeg Content-Length: 10187 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:01:10 GMT x-rgw-object-type: Normal ETag: "135e61a61184cb0ceca5447677b64d5a" x-amz-request-id: tx00000cb8bdbd467eeaa33-0065da50a2-e8f48a8-sfo1 X-Storage-Bucket: z86cc X-Storage-Object: 86cc78e492048dabf9309af79c2504ca65dc7dd5d071259060517ae4bd494de8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a6 00 fa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 06 07 04 05 08 09 0a ff c4 00 41 10 00 01 03 04 01 03 02 04 04 02 07 07 03 05 00 00 01 02 03 04 00 05 06 11 07 08 12 21 13 31 09 22 41 51 14 61 71 81 15 32 0a 16 17 23 91 a1 b1 24 42 43 52 62 c1 f0 18 34 d1 44 82 83 b2 c2 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 07 08 06 ff c4 00 33 11 00 02 02 00 04 02 08 06 02 02 03 01 00 00 00 00 00 01 02 11 03 12 21 31 41 51 04 61 71 81 91 a1 b1 f0 05 13 22 32 c1 d1 06 52 23 f1 14 42 82 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb f9 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 2a 09 1e 4e a8 09 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 82 b0 2a 5a 07 5c fe 4f 6f 8b 79 6a dc e4 e8 68 b8 be 92 b6 a2 a9 f4 07 9d 48 1b 25 28 df 71 00 79 3a 15 9c ea eb 89 69 d5 9a 0f 96 3e 28 9c 4d c4 1d 45 d9 b8 9e 64 ec 8e e5 9f df ae 08 b6 c5 b5 5b ac 32 9d 2a 75 41 2a 27 d5 52 12 d2 90 94 28 29 45 2b 56 80 3f 5f 15 2e 51 a5 95 eb c7 87 8b 0a b7 b5 f9 3c e1 d5 1f c7 7a 5f 05 f2 a7 2d 62 51 78 fb 1e b6 ce e1 fe d7 67 7f 5b f3 16 ac ef 64 0d 2f cb 5f c3 58 4b 4e 2a 42 9c 4f 6a 92 9d 83 a5 a7 60 6e b1 29 4d 5a 6d 2e 57 6e fc 11 a5 97 93 7e 06 bd eb ff 00 e2 39 cd 36 bb 5f 4e f9 fe 3f 3a fb 80 f1 07 37 db 5a 8b Data Ascii: JFIFHHCCA!1"AQaq2#$BCRb4D3!1AQaq"2R#B?@(P@(P@(P@(P@(P@(P@(NP@(P@(P@(Z\OoyjhH%(qy:i>(MEd[2uA'R()E+V?_.Q<z_-bQxg[d/_XKN*BOj`n)MZm.Wn~96_N?:7Z
Apr 26, 2024 06:11:09.850107908 CEST	755	OUT	GET /uploads/1/0/3/6/10363185/9341587.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.138206005 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/png Content-Length: 94896 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:56:11 GMT x-rgw-object-type: Normal ETag: "9eb43e2a19c291e046aa6c594eca67fc" x-amz-request-id: tx00000399b7158b1f00d1d-00662b295d-e8f44ee-sfo1 X-Storage-Bucket: zc436 X-Storage-Object: c4368445506602201b72d77e92fa91fc9cab918898a5c8af290d9726f687b10c Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 01 26 08 06 00 00 00 df 81 24 2f 00 00 80 00 49 44 41 54 78 da 94 fd 49 af 6d 5b 96 e7 09 fd 66 b5 d6 da c5 a9 6e f1 0a 7b cf 0a f7 08 f7 8c 8c 0c a2 a2 12 4a 01 12 a2 4d 93 0e 4d 8a 06 9f 06 f1 01 52 48 48 80 84 68 81 44 2f 85 40 d9 20 13 42 91 49 46 e1 e1 66 6e 11 e6 e6 66 af b8 c5 29 f6 de ab 98 15 8d 31 e7 5c 6b df fb 1c 91 d7 fd da 3b 77 9f bd d7 5e c5 28 ff e3 3f c6 50 7f fe df fe 1f 91 74 c6 00 06 c8 00 5a 03 80 52 a4 18 e5 c7 fa 9a d6 58 32 29 24 52 06 65 0d 29 19 48 a0 0c 64 05 a0 30 39 a2 c9 64 6d 49 59 a1 88 68 03 e4 0c 31 91 b5 5a 8f b9 fd 93 81 04 18 05 28 72 ce 68 05 46 97 8f 02 3a 83 2a 6f af ff 8d ca 90 01 43 2a 87 d0 f5 64 c8 64 32 0a a5 22 26 25 54 d6 44 ad 49 09 b4 d6 90 21 c7 88 d2 09 b4 92 2f d2 40 2c 9f 33 aa 9d 5b 8c 99 94 03 a8 8c ca 4a ee 97 ca a8 5c 6e 0f a6 1c 22 13 95 c1 00 2a 47 42 ce 28 0c 5a 69 22 a9 9c 5a 44 be 48 a1 73 c2 a8 4c 46 93 50 24 42 7d 18 a0 32 3a 67 72 56 72 ef b5 22 a9 72 af 32 28 1c 26 2a 94 c9 24 1d 89 39 a2 90 73 08 29 95 f7 28 b2 2a d7 93 ac 9c 97 4d e4 24 e7 a0 ac 81 94 e4 32 53 82 a4 48 68 b2 12 b9 20 43 24 a3 55 42 ab 8c ca 9a ac 34 e8 2c ef cf 99 04 90 35 1a 0d 4a 11 c9 64 42 39 51 39 61 b5 7d ce 4a b5 6b c8 4a a1 94 1c 4b 29 85 62 f3 ec 62 00 14 ca 18 48 59 ce 53 29 32 09 91 12 11 8e ac e4 95 28 8f 04 23 57 4d 4e 8a 98 45 ac 14 56 5e cd 9e 44 22 29 45 d6 0b 7f f8 67 ff 31 16 c5 ff 40 c1 7f 07 f8 59 86 73 11 83 72 c2 b9 29 c5 d5 6b 45 e0 55 fd ef 46 96 db cf 6a f3 b4 fe ab fc 51 aa 1d ff ea 38 ff 95 0e 53 cf 22 af e7 a7 72 f9 49 7d f2 ae fc c9 25 6e 35 4d 89 90 e7 9f fa 06 75 75 ed aa 08 da f6 e0 ea fa 8b ca cf f9 93 63 d4 cf 5f ab f7 67 77 55 7d 22 4e 57 e7 94 ab de 97 c7 53 ef 7d 11 aa ab d3 52 9b 6b 55 eb 89 e6 4f 2e 52 6d ce a1 9c b3 da 3c 0f f9 be cd 67 ca bd ca d7 b7 00 da b9 5c bf 42 d1 83 4f 4e 6f 73 1f b8 3e f6 4f 3e 5f b5 9e c1 56 66 36 cf 36 b3 9e 93 5a 6f 10 40 50 a8 07 05 ff 3c a3 fe f7 c0 a3 45 f1 df 02 fe 67 19 7e 95 c0 a3 94 6d 77 75 73 22 ed 92 8a 85 42 af 0f Data Ascii: PNGIHDR&$/IDATxIm[fn{JMMRHHhD/@ BIFfnf)1\k;w^(?PtZRX2)$Re)Hd09dmIYh1Z(rhF:oCdd2"&%TDI!/@,3[J\n"GB(Zi"ZDHsLFP$B}2:grVr"r2(&$9s)(*M$2SHh C$UB4,5JdB9Q9a}JkJK)bbHYS)2(#WMNEV^D")Eg1@Ysr)kEUFjQ8S"rI}%n5Muuc_gwU}"NWS}RkUO.Rm<g\BONos>O>_Vf66Zo@P<Eg~mwus"B
Apr 26, 2024 06:11:10.873508930 CEST	784	OUT	GET /uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:11.210599899 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 13174 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:38 GMT x-rgw-object-type: Normal ETag: "7a069d668246700bc8179b683c5a0d6c" x-amz-request-id: tx000007847d91408dbbf66-00662b295e-e8f48a8-sfo1 X-Storage-Bucket: z024b X-Storage-Object: 024b6dc90d2c4a73b933cf55ffe1a1e2cfd24713c49b0b6a6b33d6ce309107c6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 c4 00 00 00 88 76 75 65 64 00 00 03 4c 00 00 00 86 76 69 65 77 00 00 03 d4 00 00 00 24 6c 75 6d 69 00 00 03 f8 00 00 00 14 6d 65 61 73 00 00 04 0c 00 00 00 24 74 65 63 68 00 00 04 30 00 00 00 0c 72 54 52 43 00 00 04 3c 00 00 08 0c 67 54 52 43 00 00 04 3c 00 00 08 0c 62 54 52 43 00 00 04 3c 00 00 08 0c 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 39 39 38 20 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 43 6f 6d 70 61 6e 79 00 00 64 65 73 63 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmddvuedLview$lumimeas$tech0rTRC<gTRC<bTRC<textCopyright (c) 1998 Hewlett-Packard CompanydescsRGB IEC61966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.ch
Apr 26, 2024 06:11:25.807631969 CEST	659	OUT	GET /files/theme/plugins.js HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.039037943 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Wed, 05 Oct 2022 17:45:05 GMT x-rgw-object-type: Normal ETag: W/"a8bf2ebe41b28e96d5d8deb2b83e0ee3" x-amz-request-id: tx00000ecf71f39746d3852-0065da6155-e8f44ee-sfo1 X-Storage-Bucket: z2829 X-Storage-Object: 2829e73e900aef1b3608efa7458c3cfc249e334cd561b2d33ecd84a6ef189cf8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 34 61 33 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d fb 5b 1b 57 b2 e0 ef fe 2b da 7c bb 41 4a 84 00 4f 32 5f 46 84 64 1c 8c 13 ee b5 0d 6b 70 c6 be 2c 9f d3 48 0d 74 2c d4 9a ee 16 a0 09 fc ef 5b 8f f3 a8 f3 e8 96 64 3b 33 73 77 97 f9 26 56 77 9f 67 9d 3a f5 3a 75 aa 1e 6d 7e f9 38 f9 39 bd be ce ca fe 7f 1c 27 1b c9 cd 93 fe 56 ff 6b f8 f1 64 6b fb eb 8d ad bf 6c 3c f9 f6 51 f2 65 72 55 d7 d3 c1 e6 e6 15 95 fc ad ea 5f e6 f5 d5 ec bc 9f 17 9b f0 15 0b ec 15 d3 79 99 5f 5e d5 49 67 d8 a5 ca c9 7f 14 65 fe 21 39 49 27 97 d9 78 94 95 3b 58 ec 45 3e cc 26 55 36 4a 66 13 78 95 d4 57 59 f2 f2 e0 24 19 f3 eb e4 cb cd 47 9d 8b d9 64 58 e7 c5 a4 73 9b 4f 46 c5 6d 2f 19 15 c3 d9 75 36 a9 7b 49 76 37 2d ca fa 55 7a 9d f5 a8 81 8b 7c 92 8d ba c9 ef 8f 92 64 7d 06 d5 ab ba cc 87 f5 fa ce a3 47 37 69 99 fc b2 ff ea d9 e1 eb f7 47 af f7 9f 1f bc dd 3f 4e 76 93 d3 f5 f5 5e b2 7e 9b 9d 7f c8 6b fc 75 5d fc 03 ff 79 79 4c 0f 15 fe b7 58 3f db a1 da 27 fb c7 27 ef f7 5f ec bf dc 7f 75 02 55 f5 20 fa c3 32 4b eb 6c 7f 9c e1 53 67 7d 94 df ac 77 55 87 27 ef 8e f6 df 3f 7f f3 6a ef e4 e0 f0 15 d4 59 d7 53 d1 23 2a 0b 18 35 7c 78 99 d6 57 7d 7a e0 be d2 f3 4a bf 85 9f fc 6e 52 dc c2 bb 67 d0 57 1f 7e 42 03 9b 5f 12 a0 ab ac 4e d2 a4 ce af b3 62 56 27 b7 b0 0e f0 78 99 df 64 93 a4 1a 16 d3 0c cb fc 75 9a 96 e9 75 f2 fb 73 d5 ff 43 72 31 91 ef 5f cd ae cf b3 f2 41 b7 22 3f 1d 9e ff 96 0d eb 87 64 58 4c ea ec 8e 3f 95 59 3d 2b 27 55 f2 fb 84 eb 3d c2 75 d2 73 c3 01 9d 70 3b 7b 5c a7 73 31 e9 e9 a6 7b ba 21 5e a5 24 e1 b6 44 a5 ce 39 2c f3 f3 09 55 d2 65 4d 75 80 ec 83 99 79 7e 41 f8 92 96 97 b4 12 49 5e 25 e9 04 1e cb 74 de 4b 6e b3 e4 36 85 97 75 01 58 92 0d 67 75 46 85 2f 26 09 0c 31 4b 87 57 09 54 29 e7 aa 9d 1c 60 98 43 69 5d 1f ab 8f 60 9d 6a d3 c8 a8 40 28 5f e5 93 cb 3e d6 81 5f 15 76 38 43 dc 3d 9f 27 e9 78 4c ed 5f 67 f5 55 31 aa e0 77 0a ad 0d 87 d9 14 57 a7 82 6a 63 18 29 Data Ascii: 4a34}[W+\|AJO2_Fdkp,Ht,[d;3sw&Vwg::um~89'Vkdkl<QerU_y_^Ige!9I'x;XE>&U6JfxWY$GdXsOFm/u6{Iv7-Uz\|d}G7iG?Nv^~ku]yyLX?''_uU 2KlSg}wU'?jYS#*5\|xW}zJnRgW~B_NbV'xduusCr1_A"?dXL?Y=+'U=usp;{\s1{!^$D9,UeMuy~AI^%tKn6uXguF/&1KWT)`Ci]`j@(_>_v8C='xL_gU1wWjc)
Apr 26, 2024 06:11:26.052964926 CEST	747	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-two-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.351435900 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 31391 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:02:09 GMT x-rgw-object-type: Normal ETag: "d63b71343e0aeb3b727f0cc7d5c3a2d8" x-amz-request-id: tx00000f459e171a05c0c15-00662b296e-e8f4575-sfo1 X-Storage-Bucket: z0d0e X-Storage-Object: 0d0e08a986b9b27b58fa1749da4576d1580a63fd981a700d29551ec10ca52e1b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.646260977 CEST	369	OUT	GET /css/sites.css?buildTime=1644361842 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.800858974 CEST	676	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 29663 Server: nginx Content-Type: text/css Last-Modified: Fri, 19 Apr 2024 17:48:20 GMT ETag: W/"6622ae64-337f6" Expires: Fri, 03 May 2024 23:14:09 GMT Cache-Control: max-age=1209600 X-Host: grn129.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 536198 Date: Fri, 26 Apr 2024 04:10:47 GMT X-Served-By: cache-sjc10056-SJC, cache-gnv1820028-GNV X-Cache: HIT, HIT X-Cache-Hits: 202, 0 X-Timer: S1714104648.722422,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:47.800920010 CEST	1289	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 0b 93 e3 b8 91 20 fc 57 78 d5 d1 31 5d b3 a2 9a e2 43 8f 52 78 ce 9e b1 67 d7 11 bb b6 e3 bc b7 df c5 77 76 74 50 12 55 45 37 25 ca a4 54 0f 2b ea bf 1f 9e 64 e2 45 82 14 55 3d dd de d6 f4 b4 44 02 89 44 22 91 Data Ascii: Wx1]CRxgwvtPUE7%T+dEU=DD"H$lxNyHgXr"?Io_']0o_?~?lyx(>~Ox>fI-}n<d]}\|yWs^~/V[#ww%/>o)<M
Apr 26, 2024 06:10:47.800992966 CEST	1289	IN	Data Raw: fb 2e 1c a6 29 dd c0 61 9a d2 66 0e 53 0b 1b 39 4c 2d 6a e4 30 b5 a8 91 c3 d4 a2 46 0e 53 8b 1a 39 4c 2d 6a e4 30 b5 a8 91 c3 d4 a2 46 0e d3 0c 82 89 c3 d4 a2 dd 38 0c 6e 0e a0 22 d6 8d c7 9e bb 31 d9 73 27 2e 7b ee c0 66 cf 1d f8 ec b9 03 a3 3d Data Ascii: .)afS9L-j0FS9L-j0F8n"1s'.{f=w;0sn{n$8CN5H/uT>MEeiZs([O5=^Ul:"FW*Xh`Xb'nycz,KZ =&8^bd+GjUPhG{
Apr 26, 2024 06:10:47.801011086 CEST	1289	IN	Data Raw: 17 f3 b3 eb 0b 7c 7c 47 50 5d b2 fb 77 45 bc 49 4f e5 dd 04 97 21 7c 46 21 11 86 75 7c cf db 95 23 ca a6 ec 07 02 e8 4c f0 37 c6 d3 73 54 8f f1 f1 1c df 5e 13 f1 3c 14 f9 3d 22 78 49 b6 20 45 9e dd 3d 60 3d 57 d3 87 91 54 f1 11 5b a5 93 d6 6a dc Data Ascii: \|\|GP]wEIO!\|F!u\|#L7sT^<="xI E=`=WT[jU=U\|<<NL-\O3nvwpiJx<PojBAwU9YE{KjK6s\|By*f!h)$'O%tq+,3'O;_/yyt7
Apr 26, 2024 06:10:47.801026106 CEST	1289	IN	Data Raw: bd a5 c0 e2 5d a8 e7 67 8c 64 38 d9 eb 20 aa ec 92 3b dc 37 f0 8c 6f 84 ee fc 12 3c 45 ba 1c 7d 8c 48 78 da e3 0b 2a 5b 7c 47 25 01 45 90 4e 88 db d9 9e f6 f4 12 36 de ea c4 c5 57 3c ed 34 e3 df 6d 82 a9 a4 6f 10 8d bf be 34 39 46 b4 a0 c9 31 e4 Data Ascii: ]gd8 ;7o<E}Hx[\|G%EN6W<4mo49F1%p0`qMXYC46427MR;"x#'6!M(1h6Qw564<uwO~c'zI8I7p/gKKFR)?F/zD
Apr 26, 2024 06:10:47.801042080 CEST	1289	IN	Data Raw: 27 70 48 34 c5 b1 56 91 57 8a 59 4f cc ca c0 35 a9 0e 9b 7c 38 4b c3 f6 59 4a 5a fd 84 8f 28 4a 69 96 4a 88 e1 a3 c2 55 9e 7f 36 ac 08 9e 54 fc f8 94 1e 8f 86 51 72 31 62 4a 0d d4 d5 cf 09 e2 5d 7d 95 70 ae a9 52 88 ee 91 75 e9 99 af 29 bd 8b d3 Data Ascii: 'pH4VWYO5\|8KYJZ(JiJU6TQr1bJ]}pRu)L_\|1?d'iyn:$iLu~Lw2h,]6;bJm"L%bl?;hgQcQA3h2P_]W;>I6RA<TlA%*O<%aI
Apr 26, 2024 06:10:47.801054001 CEST	1289	IN	Data Raw: 9d ae d7 9d b9 12 e3 a5 ce ef 4a e6 62 4e d7 52 f2 8f 4f 7b 6e 1a 84 4f 74 f3 df ae d4 ef ed 4f 2a 0d f2 81 69 ae ec a0 de a6 4d 9d ac e8 87 01 df 92 9b 50 d0 35 f8 db 7a af 21 67 5e 62 0f 24 ee 03 b2 cb 3c eb 04 b1 26 cc d6 b9 20 c7 16 6c 7d ab Data Ascii: JbNRO{nOtO*iMP5z!g^b$<& l}Tb;mC.`aRCbL,@E:Mp>bS\|<m@t`"/>!-m\pl=39IqG9
Apr 26, 2024 06:10:47.801112890 CEST	1289	IN	Data Raw: a3 cf fb ba e1 f7 8d 41 16 cc f4 79 47 3c f6 fe 10 3f 5a a6 11 91 13 c1 d7 c3 d2 d0 d3 1f ea 56 28 34 2d 06 68 9a 08 57 fe 60 19 ec dc fc ef 68 19 19 c1 87 d8 9d 19 3f 64 3b ec 70 61 8a 52 07 b3 f5 3a 4a c8 b3 fb 04 a1 18 67 68 f5 8a d1 3a 75 9f Data Ascii: AyG<?ZV(4-hW`h?d;paR:Jgh:unM?EQR') <V^\}c(!w^#M0$z.^Qx(HGxR0<W\|[oil9_BlO4\%M2OURBu#[L}w2h
Apr 26, 2024 06:10:47.801126003 CEST	1289	IN	Data Raw: ef 80 c8 93 44 9c 25 66 44 14 57 f8 49 d1 b5 24 18 f4 5f b7 c4 8a 2c 16 d7 0c 5a 6b b7 47 17 03 12 b1 7c 13 2a 0e 43 02 a5 c2 a0 74 d1 43 d7 0f a9 14 d1 48 98 0b 42 c4 14 61 ca 8c de 99 df 55 20 26 08 04 c3 8d 39 59 fc 1b 4c 19 6c 58 bd f9 69 86 Data Ascii: D%fDWI$_,ZkG\|CtCHBaU &9YLlXiMB#M~aGd@{DxS/?!*\?]$.B!5^U(1B1:gj) k.+G</7&cMJOACd@6"/MFA,aHI`VES
Apr 26, 2024 06:10:47.801151037 CEST	1289	IN	Data Raw: d8 d4 05 8b e6 c8 ec 12 7b 30 6b ea c1 cc 12 a4 d0 81 69 43 07 66 4d 1d 90 5b 13 7c 01 48 2a 37 32 2f df e9 9f 2b 5a 81 d9 95 c0 08 cc 54 4a 82 f5 54 22 d1 93 98 a1 c8 ef 01 6a 30 c8 08 aa 93 db 66 ba 84 75 a0 38 25 bf 49 5c 35 b5 8e 66 e8 48 71 Data Ascii: {0kiCfM[\|H*72/+ZTJT"j0fu8%I\5fHqrTQ]c>XCy6K'"q!N!j pT><0D"kAOpt`v#\P:ej4(ihgr&4u9>8V4au/f?\
Apr 26, 2024 06:10:47.801176071 CEST	1289	IN	Data Raw: 59 96 ca 0e 38 53 f7 21 24 5e a4 74 8a 6a 4e 68 35 e0 c6 ac 7e 52 9d 03 2b 71 93 02 4f d6 78 26 4c d9 f1 64 f3 47 77 b4 89 87 9d 6a 91 b1 b9 2a 07 bb 65 c2 54 6b a6 09 f4 66 1a 4b 6c b9 22 00 54 47 6a 1e be ab 63 81 9b 6d 52 8e 6a 9a 32 26 44 a9 Data Ascii: Y8S!$^tjNh5~R+qOx&LdGwjeTkfKl"TGjcmRj2&D?K)MEuNu^LQqBv!Q[MpB3(LTU[9r\$Rp'6E 5NOkRGCs~;j&<3\|V29wG=h\z0
Apr 26, 2024 06:11:25.537123919 CEST	359	OUT	GET /js/lang/en/stl.js?buildTime=1657307797& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:25.691792965 CEST	689	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33650 Server: nginx Content-Type: application/javascript Last-Modified: Fri, 19 Apr 2024 17:46:56 GMT ETag: "6622ae10-2d861" Expires: Mon, 06 May 2024 12:19:59 GMT Cache-Control: max-age=1209600 X-Host: grn70.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 316286 Date: Fri, 26 Apr 2024 04:11:25 GMT X-Served-By: cache-sjc1000099-SJC, cache-gnv1820028-GNV X-Cache: HIT, HIT X-Cache-Hits: 376, 0 X-Timer: S1714104686.613378,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.808578014 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:25.962475061 CEST	469	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:25 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Fri, 15 Mar 2024 06:38:37 GMT Age: 249164 X-Served-By: cache-gnv1820028-GNV X-Cache: HIT X-Cache-Hits: 1698 X-Timer: S1714104686.884882,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.652075052 CEST	366	OUT	GET /css/old/fancybox.css?1644361842 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.806765079 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 1218 Server: nginx Content-Type: text/css Last-Modified: Tue, 16 Apr 2024 22:22:22 GMT ETag: "661efa1e-f47" Expires: Wed, 01 May 2024 12:26:20 GMT Cache-Control: max-age=1209600 X-Host: blu89.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 747867 Date: Fri, 26 Apr 2024 04:10:47 GMT X-Served-By: cache-sjc1000110-SJC, cache-gnv1820034-GNV X-Cache: HIT, HIT X-Cache-Hits: 142, 0 X-Timer: S1714104648.728766,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 9d 57 dd 72 a3 36 14 be ef 53 b0 f1 74 66 b3 63 61 20 f6 6e 16 ae da 8b 4c af fa 0a 1d 01 c2 56 23 24 46 c8 8e 5d ea 77 ef 91 04 46 20 93 ec 36 9e d8 92 90 ce cf 77 be 73 74 d8 7c f9 14 54 98 17 97 df c5 39 38 25 61 1c 46 76 8e 9b a6 0d 0b 51 07 ff 4e e7 1b 33 cb c5 79 b3 62 b4 20 bc 25 c1 97 4d 38 2c a2 37 89 9b f5 38 6d 5f 29 77 a6 e2 a8 88 74 e6 94 f3 e9 bc c6 7b b2 9e 4a 0b 68 25 71 ed ad 8a fc 6f 52 28 67 95 e3 d3 74 16 b4 0d 76 95 ab ba e9 1a 5c 96 94 ef d3 28 ab b1 dc 53 0e 83 5c c8 92 48 18 80 71 8c 72 92 72 c1 49 76 22 52 d1 02 33 84 19 dd f3 54 89 e6 3a 35 a0 6b 44 4b 15 15 3c c5 79 2b 18 38 96 c1 26 10 c3 48 a5 e0 e7 1f 70 ae 24 e7 f4 39 4a a2 eb 14 90 f1 a8 24 0c 2b 7a 22 59 8e 8b d7 bd 14 47 5e a6 ab ea bb fe 64 85 60 42 a6 ab ed 76 9b 29 72 56 a8 3d e0 52 bc 59 eb ac cd 48 e2 92 1e db 74 db 9c 1d 0d a2 21 9c 94 dd a8 ff 29 f2 9e 06 33 83 cc c0 ca 8f 82 38 6a ce 41 b2 83 2f b9 cf f1 e7 68 6d 3e e1 ee f1 fa 41 20 7d bf ae f3 1d 02 70 ad 18 a8 39 d0 b2 24 dc 79 ae 2e 0d 41 36 d4 c1 fc 14 7a 23 f9 2b 55 68 38 8d da 42 0a c6 74 20 95 38 16 07 47 0c 91 52 c8 ce c1 ae 12 5c a5 31 40 b4 49 b4 5f 0f 7f 10 76 22 3a b4 c1 9f e4 48 1e d6 b7 f9 fa 37 49 31 5b b7 98 b7 a8 25 92 56 23 45 06 d6 c4 00 4a f6 76 a0 8a 20 e0 56 a1 a9 a2 a9 70 5d 26 b0 75 a8 2b 69 db 30 7c 49 73 26 8a d7 ec 8d 96 ea 90 c6 51 f4 6b 76 20 74 7f 50 66 3c 97 d2 d5 18 98 36 6e d5 53 77 fb ea b6 9d 09 ac cd 73 d4 16 4c b4 ae 19 8d 24 5e 3a 70 20 95 59 eb 46 f2 59 cd e9 51 b2 cf 0f 1b 33 6e 37 82 95 63 ce 0f 83 bf da 46 02 0c 61 c3 f7 0f 8f be 29 23 13 2a 7a 26 a5 c9 8c 1d f8 60 72 63 67 9c d1 d0 22 bd 8e 92 04 50 ed 17 cc 06 bb e2 58 75 93 16 05 28 8e 9e e1 a1 00 f8 a9 ba a4 51 f8 9c 15 47 d9 42 b4 1b 41 39 90 d2 49 bc af 91 6f 59 50 d2 53 67 51 dd 02 29 86 00 98 b1 93 84 3f 80 40 2f 30 dc d3 ea e1 31 80 4a 08 ca 87 1f Data Ascii: Wr6Stfca nLV#$F]wF 6wst\|T98%aFvQN3yb %M8,78m_)wt{Jh%qoR(gtv\(S\HqrrIv"R3T:5kDK<y+8&Hp$9J$+z"YG^d`Bv)rV=RYHt!)38jA/hm>A }p9$y.A6z#+Uh8Bt 8GR\1@I_v":H7I1[%V#EJv Vp]&u+i0\|Is&Qkv tPf<6nSwsL$^:p YFYQ3n7cFa)#*z&`rcg"PXu(QGBA9IoYPSgQ)?@/01J
Apr 26, 2024 06:10:47.806776047 CEST	601	IN	Data Raw: 2e 90 24 0d c1 ea 3a 8b 89 8b b5 25 a9 92 40 b8 06 4b 38 18 7c a2 75 23 a4 c2 5c cd 9d ea cd 7c fa 0a 66 fa 85 47 9a 87 28 d6 c8 18 48 cd c8 7a 69 8e 8c 98 6c dd 62 00 45 72 b1 8c f5 18 4d 39 3a 37 cb 14 a6 92 14 42 62 23 c3 16 a7 11 46 d7 b9 65 Data Ascii: .$:%@K8\|u#\\|fG(HzilbErM9:7Bb#FeHs1R]@/}<DlNYfEnD[SU[bZu]"6z/}eQ\|J(%\wEOIw.GwL@6eC1fqWWC,d&B
Apr 26, 2024 06:11:32.962970018 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 26, 2024 06:12:18.116415024 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.652457952 CEST	376	OUT	GET /css/social-icons.css?buildtime=1644361842 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.812573910 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 1639 Server: nginx Content-Type: text/css Last-Modified: Thu, 18 Apr 2024 21:03:21 GMT ETag: W/"66218a99-3319" Expires: Fri, 03 May 2024 05:39:52 GMT Cache-Control: max-age=1209600 X-Host: blu61.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 599455 Date: Fri, 26 Apr 2024 04:10:47 GMT X-Served-By: cache-sjc10066-SJC, cache-pdk-kpdk1780100-PDK X-Cache: HIT, HIT X-Cache-Hits: 115, 0 X-Timer: S1714104648.733276,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5a cb 72 ea 38 10 dd cf 57 64 c8 e6 a6 2a 24 d8 90 00 a6 a6 66 fe 61 b6 b3 91 6d 01 2a 6c 8b b1 45 08 37 95 7f 1f c9 f2 83 47 4b 6a 1b d7 5d 4d 56 29 bb cf e9 a3 3e 46 ef bf d6 3c 13 e3 35 89 e8 57 f5 5f ca 92 53 30 3a 16 3c 62 24 19 ad 8a 3c 0a 0e 79 f2 e3 f5 35 8a 33 ff 85 c6 4c a4 a7 82 09 fa 12 f1 f4 55 61 8a d7 e3 df 65 f0 6b 05 7a a1 5c fc 29 8a 3f bc b9 37 9d cd 67 fe c4 5b 4e a7 4f 83 31 3d 32 ba 66 9f 4f 0f 6b 9e a7 44 fc 18 d1 34 a4 71 4c e3 31 df d3 4c 9c f6 74 f4 f4 dc 35 cf 91 af d7 b7 92 9b 14 ea 75 0f 56 21 6c a4 22 3f d0 9e 72 8b 8f cd 6d 59 aa 97 6d 02 19 35 7a 5a 95 b6 1e 29 db 6c 45 90 a9 37 89 7e 54 88 53 42 ab 27 df 2f 47 95 71 ac 19 c6 71 ce c2 30 94 6f 43 2a b9 e8 57 24 e3 65 69 83 d1 3f f4 7d 12 8d ea 68 a9 6f bc cf 79 7c 88 44 47 64 15 1d f1 84 e7 0f 9d 72 af 4a 4c f0 b8 9e cc e7 64 72 c5 57 fc 7b 20 39 35 10 3e 43 b1 70 e8 57 48 a2 dd 26 e7 87 2c 1e f7 ce 17 90 b5 a0 79 87 ac 1a 60 6c 70 f9 77 25 20 25 2c 01 0b 35 b5 99 84 40 59 0c b2 a0 6b ad d3 f7 69 38 a5 98 62 29 32 44 89 54 18 60 4a b7 3c 68 43 da 60 53 03 41 33 54 27 1a 72 be 03 8b 33 b1 19 82 44 5a 4c 71 30 34 c6 84 6f cb e5 02 53 b0 9a 10 51 ae 3a 14 32 a8 73 3e b4 49 97 00 53 83 61 a3 12 16 ed f2 71 42 d7 02 ac 57 6c f5 0a 0d b6 d9 e5 24 a9 1b 30 99 bc 4f e3 08 55 c1 96 13 53 be 36 1a f0 ad 57 56 bc 75 d7 18 53 e3 6d ee e5 e5 80 06 15 8f 22 ec c3 a0 dd fe d9 58 da 36 4c 26 8b 59 87 52 96 a4 f8 2a 96 e1 d0 80 d5 2b 6f 57 0f cf 40 e6 02 18 4d 04 4b b7 70 db e7 c0 39 8d 33 e0 fb fe e6 d0 e5 1a e0 97 d6 d1 20 c8 9a 85 dd 9a 7d 72 28 c0 02 cd 6c c6 20 50 16 5b 2c e8 5a 6b 1c cf c2 e9 12 53 28 45 86 28 90 0a 03 0c e9 96 07 6d 47 1b 6c 6a 20 68 06 cb 0a 41 36 39 49 c1 ea cc 6d 8e 60 a1 16 5b 5c 14 cd b4 62 3d f7 97 21 a6 66 0d 23 a2 64 4d 2c 34 b1 e8 9e 11 6d d5 15 c2 d4 68 d0 af 84 65 3b b9 Data Ascii: Zr8Wd$famlE7GKj]MV)>F<5W_S0:<b$<y53LUaekz\)?7g[NO1=2fOkD4qL1Lt5uV!l"?rmYm5zZ)lE7~TSB'/Gqq0oCW$ei?}hoy\|DGdrJLdrW{ 95>CpWH&,y`lpw% %,5@Yki8b)2DT`J<hC`SA3T'r3DZLq04oSQ:2s>ISaqBWl$0OUS6WVuSm"X6L&YR+oW@MKp93 }r(l P[,ZkS(E(mGlj hA69Im`[\b=!f#dM,4mhe;
Apr 26, 2024 06:10:47.812589884 CEST	1028	IN	Data Raw: 82 cb c0 82 f9 36 bb 90 48 8b 5b 0e 86 c6 ac c5 82 84 a8 49 73 4d 88 a8 59 1d 0a 59 d5 39 1f da a9 4b 80 a9 c1 70 2f c7 64 6c 4e 0b 78 f8 5e 5a bb 3a 24 d4 d6 df 39 28 6a e9 51 e4 7b fe 1c d5 19 d5 8c 98 be a8 8e 05 dc ea 91 11 df 07 5e 22 4c 8d Data Ascii: 6H[IsMYY9Kp/dlNx^Z:$9(jQ{^"Lxx9Y<2cj%QDKMq8}\_+gS)CTIt<P#~fT{KG:R*?pNZ%JeKLhW
Apr 26, 2024 06:11:32.821655989 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 26, 2024 06:12:17.991456985 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.653775930 CEST	359	OUT	GET /js/lang/en/stl.js?buildTime=1644361842& HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.813314915 CEST	691	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33650 Server: nginx Content-Type: application/javascript Last-Modified: Fri, 19 Apr 2024 17:46:56 GMT ETag: "6622ae10-2d861" Expires: Tue, 07 May 2024 05:06:07 GMT Cache-Control: max-age=1209600 X-Host: blu34.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 255881 Date: Fri, 26 Apr 2024 04:10:47 GMT X-Served-By: cache-sjc10074-SJC, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 11, 0 X-Timer: S1714104648.732696,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:47.813817024 CEST	1289	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 76 1b b9 92 20 fa dc fd 15 b9 bb 77 6f 57 cd b6 58 d6 5d 72 ed ae 1e dd 6c ab 74 2d 51 b2 b7 6b 3c 87 0b 24 21 32 4b c9 4c 56 5e 24 d3 ee 5a 6b 5e ce 1f 9c 97 f3 38 6b 1e ce ea 87 7e 9b 3f a8 3f 99 2f 39 11 Data Ascii: v woWX]rlt-Qk<$!2KLV^$Zk^8k~??/9@&2L]d @ ~Z7zFn0z>?v2m< ysuYK(,e/D4YIR1AAk2_"Iwu3?_#ky8={
Apr 26, 2024 06:10:47.813828945 CEST	1289	IN	Data Raw: 2f ad 1b 40 ae a3 2a fa 4f e7 91 48 8c c3 90 b0 0a c7 1b 19 40 a7 a5 87 92 ea 4f 1e 2e 78 22 00 31 d0 9f e8 15 4f a3 6d 79 45 75 3e ea dd 01 d8 b3 b5 75 45 77 9d 6c 5c d7 60 e8 7e af 2a d7 67 60 aa 36 bb 0d 2a 0e 34 62 42 73 00 67 d6 64 9a cc 8d Data Ascii: /@OH@O.x"1OmyEu>uEwl\`~g`6*4bBsgdmTBG(FaK5$h#0G$i~#oZy\q~$`ITEjela(W',:j}_=y9.@} RvPz8,@=Af;
Apr 26, 2024 06:10:47.813868046 CEST	1289	IN	Data Raw: 5c b0 c4 d4 d4 b1 b6 af 66 49 79 8a e2 39 01 ce 41 f5 03 43 1f c0 76 f0 53 da a9 c2 55 60 d4 8b a8 76 04 f2 13 bf 35 a3 2e 9b 98 56 de db 41 8c b6 c7 4a 0f db ff 1c ba e7 a3 71 de 2c c1 ab 55 e9 c5 6f 09 55 2e 69 6d 70 63 c8 f5 75 1b 43 6e 90 9c Data Ascii: \fIy9ACvSU`v5.VAJq,UoU.impcuCn=A+Q7zrTsIaa85e,C(2;"^4ve?8AW6yz6t(l>WGRz@PnByf!D:hulmo
Apr 26, 2024 06:10:47.813886881 CEST	1289	IN	Data Raw: 1b 56 f1 bb e6 2a 57 8e ce f6 8e 4f bd bd c3 c3 ab a3 76 db 6d 5a 6d 34 a8 ff 78 e1 ce 7f 55 d9 62 f1 d2 0c c7 61 b6 4a 46 e7 1e 5c 1f 9d 1e 5d be ba 38 3f f2 ce 6f ce f6 8f ae dc 3a c1 71 81 1b ab 9b 2b 9b 9b 9b 2b 78 0d 62 33 bc 55 2a 39 37 f2 Data Ascii: VWOvmZm4xUbaJF\]8?o:q++xb3U97$^]]Hm=C[#<&:~mlZ]08.S/.E"LwIceJsnvx43_FnIZ=Z3x
Apr 26, 2024 06:10:47.813942909 CEST	1289	IN	Data Raw: ab b2 be e9 ba a3 73 a8 ae c0 74 23 e0 da cf 7e 11 45 63 f3 1a c2 49 5c 28 41 f8 dc 28 b1 fe b3 5f 82 d2 d8 bc 8d 06 b7 cf 25 5d 32 e7 d6 cf 8d 52 0c 33 33 4b c5 a5 78 39 8c d2 68 10 8b f1 70 52 f9 a5 a0 68 f5 b0 4d 53 0c 4c fb 8f 15 67 c1 43 f7 Data Ascii: st#~EcI\(A(_%]2R33Kx9hpRhMSLgCF~fDK6C"U]34u>!0](&h2v\|[kty_/COrl7l'X~3{PZu0<4[fDYN4^
Apr 26, 2024 06:10:47.813956022 CEST	1289	IN	Data Raw: 16 1c 59 17 6f c2 0c f4 f2 cc 2f 73 e1 48 c5 7b 22 31 fe 9d af 64 5e f5 f5 cc 7a 53 3f 0d 24 77 95 57 bf 03 f8 5e 5b 06 cd f5 b0 05 83 a3 ca a8 bf 8d 90 c5 34 c3 85 7f d6 9c 2b 97 e9 e8 85 e5 41 04 b0 e6 97 a4 34 7d 9a 3d 8b 2b 18 81 3c 63 a6 cd Data Ascii: Yo/sH{"1d^zS?$wW^[4+A4}=+<cPK!,/oE%@=&a\s8gl9A3['#~n,Si8Sdt$8%5<~.?!Z`fQ9z(bfGy)`@%ME
Apr 26, 2024 06:10:47.814028978 CEST	1289	IN	Data Raw: 9d e8 f6 b6 33 c4 30 44 97 ad d2 4a 0b f5 c6 4d cb 63 91 00 1a 79 01 0c 2f e4 6c 01 6c 51 be 47 aa a5 98 6a 16 f6 0e 45 6b b3 48 9b 6a 78 18 75 94 d9 dc c9 5b 30 bd 87 5c ec 2a 29 50 22 35 f4 2a df f9 40 cb 6d 9e 2a d3 4a 6d a4 9b 15 20 9e 8a b8 Data Ascii: 30DJMcy/llQGjEkHjxu[0\)P"5@m*Jm KJwj{2b_VofQ8gQ"(<6TryX3Bha$Y2 cKZ"E`NP#/=t}&{RZYoE}vC`YKR@-w?fAv
Apr 26, 2024 06:10:47.814040899 CEST	1289	IN	Data Raw: 23 31 50 ab 5f bc 7e 43 48 49 19 15 d8 22 28 7d 2c ad a4 5f bc c7 b5 14 91 d4 e0 7e 1c e2 0f 60 8b 5a 10 7f 7b 7c b9 78 8b d5 b6 25 06 94 c0 9b df a3 48 79 23 56 e5 48 c5 c4 97 7f e7 88 63 1d ef 3e ed 5f 9f 3d 1d 71 c4 0a 53 e9 c8 78 6d 2e 78 0b Data Ascii: #1P_~CHI"(},_~`Z{\|x%Hy#VHc>_=qSxm.x"@;!+G}N]k~yGF6bUB@+W~mFlIkSXSv0grQWa%jGSob y\t\|(mhO
Apr 26, 2024 06:10:47.814300060 CEST	1289	IN	Data Raw: fb b2 f1 cc a0 ad b0 4e 0e c6 2b 6b 7d 36 30 6b 61 90 1f dd c4 cf 35 11 72 57 e8 8f 33 4e 30 36 22 2c b6 23 fb 74 c4 d2 c8 d1 75 50 c6 4f d1 61 2a d3 56 57 d2 b1 3a 18 e1 cf d6 36 37 55 ea 0b a0 29 ba 18 50 c4 c2 34 9d 69 be 39 b6 a6 50 49 f4 ee Data Ascii: N+k}60ka5rW3N06",#tuPOa*VW:67U)P4i9PI=o{cek5hrzGs]Ql<Y[9<5$:"\Nr,{q^tN"UU^zs\|@-"867^ypFRj0BU\|_fX-S1
Apr 26, 2024 06:10:47.814312935 CEST	1289	IN	Data Raw: a5 1e 65 ed 54 f9 d1 14 f6 81 4a 40 ae d3 56 30 ef e9 1d 2f 85 48 0b 46 d4 19 fb 7d 3e 47 da 70 8d c7 cc f6 50 57 97 d1 24 0a 3b d7 da e8 3c 8d 1a 45 60 b8 f8 20 dc ca f1 9c 2a bf 8d 25 b1 0d 03 79 79 31 3a 33 8a 86 3a b3 b5 f3 f0 14 35 27 51 d0 Data Ascii: eTJ@V0/HF}>GpPW$;<E` %yy1:3:5'QW!m;f&)W-iPZ"$VIyglL%D0mn"N2<xCLU`^M<d{Nvf5-F?Q)?Da)L%dpcf1
Apr 26, 2024 06:10:48.951689959 CEST	364	OUT	GET /js/site/footerSignup.js?buildTime=1713980951 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:49.110527992 CEST	693	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 1372 Server: nginx Content-Type: application/javascript Last-Modified: Wed, 24 Apr 2024 17:23:07 GMT ETag: "66293ffb-e10" Expires: Wed, 08 May 2024 17:51:05 GMT Cache-Control: max-age=1209600 X-Host: grn136.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:49 GMT Age: 123584 X-Served-By: cache-sjc1000146-SJC, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 11, 689 X-Timer: S1714104649.030751,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:51.322875023 CEST	378	OUT	GET /css/free-footer-v3.css?buildtime=1713980951 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:51.481317997 CEST	677	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 886 Server: nginx Content-Type: text/css Last-Modified: Wed, 24 Apr 2024 17:22:41 GMT ETag: "66293fe1-a49" Expires: Wed, 08 May 2024 17:51:06 GMT Cache-Control: max-age=1209600 X-Host: grn155.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:51 GMT Age: 123585 X-Served-By: cache-sjc1000141-SJC, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 622 X-Timer: S1714104651.401701,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:51.626168013 CEST	454	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:51.784509897 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 1488 X-GUploader-UploadID: ABPtcPrZvm6VLwtsUOSQMA8nbynKNceOpLp0vg5AByS6nH1QO7mlGooqLkPAq2pmDTB2Qg-8R-c9LHqTww Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 27 Apr 2024 06:04:10 GMT Last-Modified: Wed, 10 Oct 2018 21:37:00 GMT ETag: "bc61dcb431a14c508075eeff4f74523a" x-goog-generation: 1539207420450301 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3507 Content-Type: image/svg+xml x-goog-hash: crc32c=vgUlyw== x-goog-hash: md5=vGHctDGhTFCAde7/T3RSOg== x-goog-storage-class: STANDARD Server: UploadServer Content-Encoding: gzip Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:51 GMT Via: 1.1 varnish Age: 166000 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1103 X-Timer: S1714104652.704805,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 57 4d 6f 1b 37 10 bd e7 57 6c b7 97 04 90 28 72 86 c3 e1 04 96 03 44 40 7b 71 80 02 69 2f b9 39 d6 46 12 62 4b 86 ac c6 ce bf ef e3 4a 86 c9 54 f6 25 bb 6f 47 f3 f1 e6 cd 90 b9 f8 f0 74 77 db fd 18 f6 0f 9b dd 76 de 07 e7 fb 6e d8 de ec 96 9b ed 6a de ff f3 f7 1f d3 dc 7f b8 7c 73 f1 f0 63 d5 3d 6e 96 87 35 6c 3c df 3f f5 dd 7a d8 ac d6 87 79 cf a1 bc fd d8 0c 8f 1f 77 4f f3 de 77 be 83 45 c7 a1 af dd e2 0d 81 b6 0f f3 7e 7d 38 dc bf 9f cd 1e 1f 1f dd 23 bb dd 7e 35 23 ef fd 0c 01 4e 26 ef 9f 6e 37 db ef e7 0c 83 99 cd c6 af fd e5 9b 0e 7f 17 bf 4d a7 dd 9f c3 76 d8 5f 1f 76 fb f7 dd e7 ef c3 e1 66 dd 09 b9 d0 bd 4d ea 63 7e d7 4d bb ca d1 d7 dd 7a b8 db 5c 9f 0a 74 37 bb bb d9 c3 f1 37 d3 e9 c9 e5 61 73 b8 1d 2e af 76 ab dd e1 e7 fd d0 45 7f ff d4 2d 76 f7 3f 2f 66 c7 2f 47 ab e5 f0 70 73 b9 d8 0f d7 87 61 09 Data Ascii: uWMo7Wl(rD@{qi/9FbKJT%oGtwvnj\|sc=n5l<?zywOwE~}8#~5#N&n7Mv_vfMc~Mz\t77as.vE-v?/f/Gpsa
Apr 26, 2024 06:10:59.872884989 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:00.031405926 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:10:59 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253287 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2363 X-Timer: S1714104660.951748,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:00.850178003 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:01.009047031 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:00 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166010 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1104 X-Timer: S1714104661.929084,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:03.725240946 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:03.884021997 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:03 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253291 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2364 X-Timer: S1714104664.804354,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:04.634282112 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:04.792814016 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:04 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166013 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1105 X-Timer: S1714104665.713204,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:05.181987047 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:04 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166013 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1105 X-Timer: S1714104665.713204,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:07.278310061 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:07.437303066 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:07 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253295 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2365 X-Timer: S1714104667.357724,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:07.731128931 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:07.889894962 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:07 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166017 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1106 X-Timer: S1714104668.810208,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:10.329627991 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:10.488169909 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:10 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253298 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2366 X-Timer: S1714104670.408593,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:11.393829107 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:11.552405119 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:11 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166020 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1107 X-Timer: S1714104671.472790,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:17.276655912 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:17.435933113 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:17 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253305 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2367 X-Timer: S1714104677.355741,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:17.741703987 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:17.901047945 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:17 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166027 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1108 X-Timer: S1714104678.821282,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:21.746803999 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:21.905533075 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:21 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253309 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2368 X-Timer: S1714104682.825923,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:22.728384018 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:22.887248993 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:22 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166032 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1109 X-Timer: S1714104683.807425,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.536806107 CEST	369	OUT	GET /css/sites.css?buildTime=1657307797 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:25.696475029 CEST	682	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 29654 Server: nginx Content-Type: text/css Last-Modified: Tue, 16 Apr 2024 22:22:17 GMT ETag: W/"661efa19-337cc" Expires: Wed, 01 May 2024 12:16:47 GMT Cache-Control: max-age=1209600 X-Host: grn14.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 748478 Date: Fri, 26 Apr 2024 04:11:25 GMT X-Served-By: cache-sjc1000140-SJC, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 427, 0 X-Timer: S1714104686.615703,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.808064938 CEST	379	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1657307797 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:25.968229055 CEST	692	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 159146 Server: nginx Content-Type: application/javascript Last-Modified: Fri, 19 Apr 2024 17:48:46 GMT ETag: "6622ae7e-826d7" Expires: Sun, 05 May 2024 11:15:54 GMT Cache-Control: max-age=1209600 X-Host: grn17.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 406531 Date: Fri, 26 Apr 2024 04:11:25 GMT X-Served-By: cache-sjc10049-SJC, cache-pdk-kfty2130020-PDK X-Cache: HIT, HIT X-Cache-Hits: 28, 0 X-Timer: S1714104686.887539,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:26.284127951 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:26.445600033 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:26 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166035 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1110 X-Timer: S1714104686.362849,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:39.318213940 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:39.477209091 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:39 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253327 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2369 X-Timer: S1714104699.397194,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:40.092026949 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:40.262234926 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:40 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166049 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1111 X-Timer: S1714104700.170818,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:45.481015921 CEST	535	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:45.639513016 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:45 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253333 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 2370 X-Timer: S1714104706.559873,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:46.056463957 CEST	555	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://cdn2.editmysite.com/css/free-footer-v3.css?buildtime=1713980951 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:46.214945078 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:46 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166055 X-Served-By: cache-pdk-kfty2130020-PDK X-Cache: HIT X-Cache-Hits: 1112 X-Timer: S1714104706.135359,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.654148102 CEST	356	OUT	GET /js/site/main.js?buildTime=1644361842 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:47.814055920 CEST	695	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 146401 Server: nginx Content-Type: application/javascript Last-Modified: Tue, 16 Apr 2024 22:22:40 GMT ETag: "661efa30-74804" Expires: Wed, 01 May 2024 14:23:27 GMT Cache-Control: max-age=1209600 X-Host: grn43.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 740840 Date: Fri, 26 Apr 2024 04:10:47 GMT X-Served-By: cache-sjc1000138-SJC, cache-pdk-kpdk1780147-PDK X-Cache: HIT, HIT X-Cache-Hits: 263, 0 X-Timer: S1714104648.733765,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:47.814069033 CEST	1289	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 7f db 36 b2 00 fa ff fd 14 32 db 3a a4 45 bd ec 24 4d 28 33 fa a5 71 d2 64 b7 69 b2 b1 bb d9 56 d6 fa d2 12 64 b3 a1 49 95 a4 e2 b8 92 ce 67 bf f3 00 40 80 a2 92 f4 ec 9e db 87 4c 82 78 0c 80 c1 60 5e 18 b8 Data Ascii: {62:E$M(3qdiVdIg@Lx`^e:-,u2Yv;v$.{L;CUC+s?ZO?<&"*v[-b<o],nX$w!OZq!.^Gm-D^uQxJIf
Apr 26, 2024 06:10:47.814075947 CEST	1289	IN	Data Raw: be f8 e9 dd f5 e3 c5 8b 3f c4 a7 d7 3f 2c 7e f9 f0 61 79 ff ec e9 af af bf 77 86 36 09 bd 78 bf 91 ec 5a e9 a7 9e 9f ef a4 9d 39 d2 ce a3 2d da e9 ea 84 d2 dc 32 ca b1 73 01 60 c5 ee d1 7d d8 5e 14 81 36 36 09 09 45 79 1d 17 1b 17 ab 7e b0 93 2c Data Ascii: ??,~ayw6xZ9-2s`}^66Ey~,WMd~AJ#G6:e_12G-ll!s;c%R>42=`sX5HK?czu2x.owFj%6VLYFjf"'>w3
Apr 26, 2024 06:10:47.814095020 CEST	1289	IN	Data Raw: 05 55 c2 37 a8 fb 3a 2a 76 d6 cd 99 f6 42 1c 16 00 dd 82 62 17 03 36 a3 3d 2c a4 32 75 16 4b ae 09 61 ed 0e 19 ec 6d 80 34 2c 68 b8 19 6f 7d b0 90 36 29 e0 6d 4a 78 5b f1 10 72 c2 84 8b 3c a1 67 12 ef 61 11 a6 80 d5 00 e4 30 81 a7 02 08 4f 5a 0e Data Ascii: U7:*vBb6=,2uKam4,ho}6)mJx[r<ga0OZ#dr[c-5uZ9$3O9g[#'o?Q Y9,BuS\|d9!n@q-,>Tos+x~M%v4OD1
Apr 26, 2024 06:10:47.814126968 CEST	1289	IN	Data Raw: c7 d9 30 47 d1 30 02 16 1b c5 4c ad 8d 80 37 26 f8 51 c5 76 5b 7a ed cb bb 57 20 2e 02 29 9b 34 a6 4f f1 83 dc a1 95 0d 3e 92 38 46 d3 56 48 f3 a2 4b 66 08 4a 67 a0 3a 1d b9 c9 31 36 e1 b6 4a 15 84 c5 30 aa a8 05 0f 8f 03 2c 14 8d 3d 2c 27 85 cc Data Ascii: 0G0L7&Qv[zW .)4O>8FVHKfJg:16J0,=,'NE.D'EGbb[8++TS%-VckB7R_jd^rgd9Z*&D8G7%MKx@fKxX)Ew:N2CP0YLo<Y
Apr 26, 2024 06:10:47.814137936 CEST	1289	IN	Data Raw: e7 05 d6 4e 47 d3 e0 7b 44 45 a4 f6 88 9a a7 cf 50 29 be cd f2 0c fb 9b 44 94 28 f7 61 4c 8f e7 12 21 a9 30 e9 36 b0 8d eb e5 7c 9e 08 59 e2 95 4e 97 1c 0c c2 7b 1d 11 5c 45 74 b3 80 8c 5a f5 78 69 a9 1e 3f fe a7 aa 47 49 e9 be a0 76 bc 85 19 be Data Ascii: NG{DEP)D(aL!06\|YN{\EtZxi?GIv-[%=1zODE9AAnCZw1[}\6q/#He%~>r2CJi{~{}C]Sw v\|L%\|bgS
Apr 26, 2024 06:10:47.814151049 CEST	1289	IN	Data Raw: 1d 95 71 dd 45 b6 70 3d 4f 99 c0 aa 5c d8 d1 aa 08 9e 57 44 ad 93 85 15 75 05 a7 f6 84 7a ee 3b e7 e7 df ee 03 cf a0 52 3e f9 8e 3b 0a be 1d 78 23 23 f1 69 ed 18 8f 56 ac c3 6c ba e3 7f f7 46 93 b6 e7 6c aa fc 1f 7c 4c 1e 4d 60 1d 39 7a f8 90 0c Data Ascii: qEp=O\WDuz;R>;x##iVlFl\|LM`9zI$uE:?tryoTlXW IO!~EO<V%QJ#:-w0\|W0%/]:?zc+?]_E1^4zf%P1%;DXQZ' N9ME[I^@yU
Apr 26, 2024 06:10:47.814201117 CEST	1289	IN	Data Raw: 6a c3 10 b8 90 24 74 2f 2e 8a e5 42 e4 17 17 76 35 0c 33 34 b4 90 25 c3 8f ea e1 ad 7a 38 53 0f af d4 c3 ef 04 fc 8f 36 f0 36 ef 7f ef 69 8b 14 ed ad 85 0c ad db ca f2 96 ca df ba 59 16 25 08 00 ad 62 21 a6 f1 3c 16 b3 7b 52 c1 f6 a6 29 6e 0b b0 Data Ascii: j$t/.Bv534%z8S66iY%b!<{R)n+UT"RLjQDk(+JH]y7f>r4N_x;oR~`Gy:ST++M_?+u'w$KL+c4^77Hvk"a0G'8}VjH]qHh
Apr 26, 2024 06:10:47.814237118 CEST	1289	IN	Data Raw: 0f 2f a8 1d 63 2c d0 f1 4e 8c 0f f1 e7 08 7f ee 4f 26 b0 45 6f 43 d2 36 ab fd ae 82 e0 ab d3 ff 13 08 0f 0e bb 0f 1e 10 98 ea e9 48 3f 19 00 7f e3 8e a3 ce bc df 79 3c 59 1d 02 66 ed 7c f9 4c 6b f4 e1 15 ea 9f 70 60 06 20 b7 19 29 87 5b 29 47 94 Data Ascii: /c,NO&EoC6H?y<Yf\|Lkp` )[)Go7CHvL}Ea9E+7iMi1hle\#@VWEf}>99wo\/CN\|g+-P8TvOtTE 7Bj
Apr 26, 2024 06:10:47.814331055 CEST	1289	IN	Data Raw: 84 4b f8 7f fe c7 4d 0f 80 5b d5 b7 2c a0 65 75 7b 8e b1 23 68 e6 ef 1b da 5c 90 62 aa b5 5f 05 86 18 39 7d a8 01 a7 86 01 26 6f 42 55 68 97 ef a7 81 a8 fd 91 b5 e6 39 e8 8a 89 46 b4 51 0d 33 2d 59 18 e6 51 4c ac f8 cd 85 36 40 87 6e dc 1e 78 df Data Ascii: KM[,eu{#h\b_9}&oBUh9FQ3-YQL6@nxF<<heGxJa{PJ$j(THbtU=:d#cJ@-=)J`!?!0,py@8%NU6_B7 =}pej
Apr 26, 2024 06:10:47.814343929 CEST	1289	IN	Data Raw: 18 ad 0a 56 63 42 7a dc d8 9b 84 98 65 23 9d 65 d1 8e 1d cb db fd 3e 5b 49 ac cb 29 de a1 52 24 67 95 b7 1e 86 46 c0 e0 be 14 b8 23 93 97 ef a1 06 22 63 20 e1 2f cc 1e 9b 7a f7 52 bc ca 84 67 55 cd 78 36 59 af f7 58 eb 6d ec ba 05 ee 50 78 ff 49 Data Ascii: VcBze#e>[I)R$gF#"c /zRgUx6YXmPxIXl*rQoN!~BMj\\|A{LQDx~I)Jj{I91,R9W;2~~RwWRU`\lp.pi]IPsqtKl"NK8
Apr 26, 2024 06:10:48.941518068 CEST	434	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:49.102206945 CEST	953	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 9677 X-GUploader-UploadID: ABPtcPrBs8-aYzyVSEOSwRym446nby7IRGpyulY4dDR8fsYGcLC0s-ZlWDGOyaTQOnNizot9xfBZIEZ7OQ Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Thu, 11 Apr 2024 05:49:28 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:49 GMT Via: 1.1 varnish Age: 253276 X-Served-By: cache-pdk-kpdk1780147-PDK X-Cache: HIT X-Cache-Hits: 1746 X-Timer: S1714104649.021434,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:49.566914082 CEST	379	OUT	GET /js/site/main-customer-accounts-site.js?buildTime=1644361842 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:49.727634907 CEST	692	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 159146 Server: nginx Content-Type: application/javascript Last-Modified: Thu, 18 Apr 2024 21:03:47 GMT ETag: "66218ab3-826d7" Expires: Fri, 03 May 2024 10:36:09 GMT Cache-Control: max-age=1209600 X-Host: blu144.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 581680 Date: Fri, 26 Apr 2024 04:10:49 GMT X-Served-By: cache-sjc10081-SJC, cache-pdk-kpdk1780147-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1714104650.647108,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:51.322166920 CEST	342	OUT	GET /js/wsnbn/snowday262.js HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:51.481137037 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 25752 Server: nginx Content-Type: application/javascript Last-Modified: Fri, 19 Apr 2024 17:48:10 GMT ETag: "6622ae5a-124fe" Expires: Sun, 05 May 2024 10:09:56 GMT Cache-Control: max-age=1209600 X-Host: grn151.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:51 GMT Age: 410455 X-Served-By: cache-sjc10061-SJC, cache-pdk-kpdk1780147-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 8917 X-Timer: S1714104651.401669,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 7d 6b 7b da c8 92 f0 e7 33 bf c2 d6 d9 f5 48 43 1b 03 be 06 ac 78 6d 27 76 ee c9 24 76 9c 84 30 7e 1a 10 20 0c 08 24 71 b3 61 7f fb 5b 55 7d 51 4b e0 24 73 ce ee be e7 64 8c d4 97 ea ee ea ea ba 75 a9 db 6e 8d 07 8d d8 0f 06 1b 9e 5d 67 6d d6 74 1e 74 4a c3 1e b0 ae f3 e0 b7 ec cd 76 75 50 13 4f 75 7a 9a f0 70 c3 77 e3 f9 d0 0b 5a 1b a1 37 1a fb a1 e7 ba 96 aa 6a 6d 6d c9 c4 0a d6 e9 6e 6d f9 ce 43 e8 c5 e3 70 b0 e1 03 d4 cd 82 b3 84 0c ae 13 b9 4c 44 b8 7d 77 e0 4d 37 9e 87 61 10 da d6 39 1f 0c 82 78 a3 e5 0f 9a 1b fd a0 39 ee 79 1b bf 5b b9 41 ce fa dd 72 2a 71 27 0c a6 1b fd 7c 23 68 7a ae f5 f6 fd b3 eb 37 cf 6f df bd bf ba bd 78 7f fd ee 99 c5 fa 04 af e3 62 ef dd 07 6f 36 0c c2 38 2a 3f 2c 97 15 1c 45 b5 50 cb 37 78 af 67 77 f2 32 8b a9 fe db 3d 31 c4 c0 a5 82 c5 5a b5 57 ab c8 ae 36 ec e0 24 28 f7 9c 25 eb b0 a4 a6 c7 04 f6 96 b2 14 36 a9 32 a9 17 fc 97 b0 d5 82 31 63 e9 96 5b a8 b4 8e 9b f9 9e 37 68 c7 9d 4a 2b 97 73 1e 1a 76 b3 da aa e9 16 1a 4b c7 7e 28 96 ab ba cf 12 06 13 68 62 b2 71 31 90 57 9f de bf a3 a9 c0 07 e7 01 ff ba 80 07 5b 57 16 c5 da bd a0 ce 7b ee 85 4a b5 64 5b 71 c7 8f 2c c7 76 18 55 14 a5 f2 8f c0 d4 e4 d3 b2 07 7a 7e 07 c7 c5 c2 89 55 80 99 2b 0f 70 e6 25 2e 9e f1 d8 cb 0f c3 20 0e 30 21 1f 07 08 64 d3 44 8d f3 b0 b6 8c ab 3b 7e e7 cd 13 d2 8a 2e fc 81 1f 7b 36 f6 37 3f e1 bd b1 f7 be 65 3b ce 09 bd b7 bd f8 fa ea fc 62 dc eb 7d f5 78 68 3b 39 6b db ca b5 6c 23 ef 6d 30 88 3b 90 51 5c 93 87 dd 00 50 39 eb 2a 93 f1 22 18 87 11 e5 94 b3 e0 fc c1 38 f6 d6 e7 7d f2 1a c1 a0 29 f2 be 59 e5 01 f4 ea b7 65 e5 53 1c fa 83 f6 ea 68 df 8d fb 75 2f 5c 4d 3f 0b 82 9e c7 07 bf 88 9e 34 56 96 44 96 8d 99 bb 53 fd 3e 2e c0 ff f0 2f 6f c2 df 83 42 61 9b 7e f6 e0 ef 61 a1 f5 7d 5c 3c ac ef d1 df fd ef e3 52 a1 Data Ascii: }k{3HCxm'v$v0~ $qa[U}QK$sdun]gmttJvuPOuzpwZ7jmmnmCpLD}wM7a9x9y[Arq'\|#hz7oxbo68?,EP7xgw2=1ZW6$(%621c[7hJ+svK~(hbq1W[W{Jd[q,vUz~U+p%. 0!dD;~.{67?e;b}xh;9kl#m0;Q\P9*"8})YeShu/\M?4VDS>./oBa~a}\<R
Apr 26, 2024 06:11:25.537126064 CEST	356	OUT	GET /js/site/main.js?buildTime=1657307797 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:25.697180033 CEST	692	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 146401 Server: nginx Content-Type: application/javascript Last-Modified: Fri, 19 Apr 2024 17:48:46 GMT ETag: "6622ae7e-74804" Expires: Sat, 04 May 2024 00:26:59 GMT Cache-Control: max-age=1209600 X-Host: blu27.sf2p.intern.weebly.net Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 531867 Date: Fri, 26 Apr 2024 04:11:25 GMT X-Served-By: cache-sjc10036-SJC, cache-pdk-kpdk1780147-PDK X-Cache: HIT, HIT X-Cache-Hits: 19, 0 X-Timer: S1714104686.616733,VS0,VE1 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.808005095 CEST	403	OUT	GET /images/old/bg_feed.gif HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:25.967358112 CEST	1242	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 299 X-GUploader-UploadID: ABPtcPpEwDIvKXQbT29jz-GdVM_qDhqgXzbDcY2FWHe8jHsAImMdc4MUoQ4trukU1gjSIeUvtnA Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Tue, 09 Apr 2024 05:21:58 GMT Last-Modified: Thu, 25 May 2017 18:44:03 GMT ETag: "974a8ea2a8b86c3d99cfef5dd1e28827" x-goog-generation: 1495737843178700 x-goog-metageneration: 6 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 299 Content-Type: image/gif x-goog-hash: crc32c=SE8U5w== x-goog-hash: md5=l0qOoqi4bD2Zz+9d0eKIJw== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:11:25 GMT Via: 1.1 varnish Age: 168530 X-Served-By: cache-pdk-kpdk1780147-PDK X-Cache: HIT X-Cache-Hits: 296 X-Timer: S1714104686.887998,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 11 f1 0c fb dc be db 96 5e f1 89 0e cc 6a 29 f1 ae 0c ff ff ff ed ad 30 f8 d1 7d f5 9e 4a f3 b1 24 dc 77 1d fd f2 e6 f1 a3 0c d8 86 35 f8 c1 79 f7 bf 48 ff cc 99 f3 dc 18 f1 be 0c fc eb c9 f4 df 2d f1 93 0c f6 ae 59 f2 d6 15 f5 d2 46 fc e2 c9 e9 a7 3e f3 d1 16 f0 9f 11 f9 da 96 f8 c4 87 21 f9 04 05 14 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 a8 20 00 14 45 63 36 56 3a ac 22 a0 5c 5e 25 49 18 c6 dd 53 37 00 c7 c3 64 93 a0 70 68 19 28 3c 99 00 85 82 50 0c 49 85 c5 a1 32 a1 18 ae 06 04 94 34 59 6c 24 93 0c 22 c0 b8 52 14 a7 ee 86 53 40 78 20 c7 2b a3 43 ef 2e 26 16 cd 55 b3 79 5c 23 29 76 78 1f 56 57 09 11 57 1b 16 5d 04 05 29 16 17 65 14 16 65 80 13 04 04 0d 03 17 1a 17 09 57 0f 1f 06 0c 03 97 04 3a 7a 06 03 01 06 01 1b 57 a5 98 2b 88 14 9b 06 1a 16 57 17 07 98 0b 2b 09 2b 9b c0 17 17 08 02 04 00 04 be 8f 74 cd 1d 0e c8 22 98 d3 d4 d3 22 21 00 3b Data Ascii: GIF89a^j)0}J$w5yH-YF>!, Ec6V:"\^%IS7dph(<PI24Yl$"RS@x +C.&Uy\#)vxVWW])eeW:zW+W++t""!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:47.807787895 CEST	473	OUT	GET /uploads/1/0/3/6/10363185/5533639.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:48.051006079 CEST	1288	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:47 GMT Content-Type: image/jpeg Content-Length: 23471 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:18 GMT x-rgw-object-type: Normal ETag: "c699c1125a9efaf6a5c1c284228c071f" x-amz-request-id: tx000005a3976a57c545f7b-00662b2408-e95274c-sfo1 X-Storage-Bucket: z0be5 X-Storage-Object: 0be5ae8e8f1310331ffcf5569b1c64652b0f48d21d29dc45fdf224049dc7b1a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 b9 01 03 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 07 01 06 08 00 02 04 05 09 03 0a ff c4 00 59 10 00 01 03 03 02 03 05 03 06 06 0c 0a 08 07 01 00 01 02 03 04 05 06 11 00 21 07 12 31 08 13 22 41 51 14 32 61 09 15 23 42 71 91 16 33 52 81 a1 b4 17 24 25 34 38 43 62 72 92 b1 c1 d1 35 37 53 73 74 75 76 b2 b3 f0 0a 18 36 44 54 63 77 82 26 39 64 84 93 c2 e1 f1 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 11 00 02 01 02 04 03 04 06 07 07 03 05 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 14 a1 d1 15 22 32 61 71 81 06 33 43 52 53 91 b1 16 23 35 42 72 c1 f0 24 34 b2 36 44 82 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ef ab 89 43 8d 94 2c 02 92 39 48 3d 08 f4 d6 4d 67 83 44 ad 0e 2c 76 a3 f9 39 ab bc 43 ac 49 b8 b8 5c fb 5f 39 b3 21 6e c7 65 d7 83 4e 30 79 b9 8b 3b 8f 1a 49 39 4a b2 30 32 35 cf 85 8c a9 c9 a7 b1 69 7a da 90 0a a1 ff 00 58 1e 07 cf 5d 17 8a 9c 3b ac 32 a8 49 09 15 54 30 a1 b7 97 33 98 28 58 23 7f 7b 53 5b 05 4d bc d0 dc 2a 99 74 37 f4 be d4 36 fa 59 42 2b 30 65 21 23 a9 5c 72 09 f8 9c 64 1d 79 b2 c0 56 be 86 8a aa be a6 9a f0 ed 23 6d 3b 1a 9c 6c d7 a9 6c 12 e6 27 1a 94 35 f3 24 79 91 b6 35 5e e9 89 da d6 34 ed 69 9e f2 bb 4f 70 e1 9a 02 58 34 c4 d7 2a 61 18 71 71 e1 94 b2 4f 96 01 d5 d6 0a bc b7 76 2a ea c1 02 ca af 17 6e 1b da a0 69 f6 55 97 32 5a 97 80 88 90 e3 14 a4 ab a0 e6 08 f1 2b 7f 2d b5 d9 4f 05 38 bd 5d cc 1d 58 bd 82 15 9d d9 2f 8d 3c 40 b8 a9 15 8e 2b 53 25 d0 ad c4 1c c5 Data Ascii: JFIFHHCCY!1"AQ2a#Bq3R$%48Cbr57Sstuv6DTcw&9d?!1AQ"2aq3CRS#5Br$46D?C,9H=MgD,v9CI\_9!neN0y;I9J025izX];2IT03(X#{S[Mt76YB+0e!#\rdyV#m;ll'5$y5^4iOpX4aqqOv*niU2Z+-O8]X/<@+S%
Apr 26, 2024 06:10:48.051064014 CEST	1288	IN	Data Raw: a6 38 d7 b3 b4 84 7b db 83 8c 0f 5c 0c 9d 77 b8 c6 82 ba 32 f6 99 22 78 d3 32 87 63 da 36 15 85 6b aa 0d 26 b7 11 97 11 55 83 2e 60 65 89 5d d9 fa 22 ce 7f 17 e1 3e 7d 75 e3 f6 9e bd cd f2 e8 02 ed ce d7 f7 d5 8d 4b 76 98 cd 9d 03 bc 4a cf 8c 90 Data Ascii: 8{\w2"x2c6k&U.`e]">}uKvJ]tges^Q=/"J}1+k1_tU2s+'cv%9ENU?7u:8Wr$l/DCiT}szzThuO}1aeM9e9}XV
Apr 26, 2024 06:10:48.051131964 CEST	1287	IN	Data Raw: 84 24 03 f7 9f 8e b8 9e 9a b0 46 5a f5 a1 2a 96 b1 50 78 77 32 c2 c1 28 f3 c8 f5 d6 8a a2 44 d9 a0 8d c3 7b 45 da d9 76 ad 6f 56 57 4b b8 58 f1 32 90 ae 50 55 d7 07 ed d6 8e ad 96 e4 13 db 83 3c 73 ac 4b a4 9a 6d 74 ad 15 7a 7b a6 3c a6 d5 ef 05 Data Ascii: $FZPxw2(D{EvoVWKX2PU<sKmtz{<N<8B7@3S)-yir1^8SxWk?1jjcnG7:htGuP$Nv\|pW'xz+nDlG#(8H6+j
Apr 26, 2024 06:10:48.051196098 CEST	1288	IN	Data Raw: d7 bb 2e df 94 a9 8c a6 43 0f d1 5f 05 b5 0c 82 42 09 1f a4 6b 3a fe c9 27 0a ad 07 d3 43 62 34 26 5b 54 26 bb f5 77 6a 4f b8 0e 7a 1d 70 59 38 fa c0 90 ed ab da e9 0d b8 e1 41 59 dd 79 3b 7d be 9a f3 65 04 a4 6f 17 a0 04 be 2b 16 8a 6e 14 48 a5 Data Ascii: .C_Bk:'Cb4&[T&wjOzpY8AYy;}eo+nH<{KBhV[WWqVJu]'*O!E&du#E([(H?NBPV'Hh>X;yE-?6~5]@g+)i
Apr 26, 2024 06:10:48.051258087 CEST	1288	IN	Data Raw: 3f 39 d4 e6 88 01 3c 41 ed 3d c0 de 1b 53 9e 76 e6 e2 15 29 2f 21 24 fb 34 49 09 7d c5 63 cb c2 79 73 f6 9d 61 2a b0 5f fc 04 0f bb 7e 51 0b ae fe ab 3d 6d 76 69 e1 6d 6a f2 a8 af 28 44 f6 29 ea 7d 28 27 a1 2b c0 69 1f 9d 47 1a c9 d4 76 bd 80 03 Data Ascii: ?9<A=Sv)/!$4I}cysa_~Q=mvimj(D)}('+iGvpWnjwLm'o5hOdnpFTE-)JF54.tMOT*[DHp[4?%9NRV%n.6zc ;3$(~c\W3#q.
Apr 26, 2024 06:10:48.051320076 CEST	1288	IN	Data Raw: 27 40 26 72 3c c7 fe d3 a6 a0 ad fd 4f f4 75 1a 81 77 f5 3f d1 d3 50 27 30 fc 95 1f fd a7 4d 40 85 5e 89 57 f4 74 d4 0b 93 8e 84 7f ed d3 52 04 df d5 5f 99 27 4d 46 a5 6f f1 fb 8e a7 50 5d 9d ba 1f e8 9d 35 05 67 e0 7f a2 74 d4 9b 89 bf c7 fa 3a Data Ascii: '@&r<Ouw?P'0M@^WtR_'MFoP]5gt:_K2JREnVO:I??vCiR?vOTTdm,lneBN?tuR2wU23\|gKG9T59y#. TjS>j_w
Apr 26, 2024 06:10:48.051357031 CEST	1288	IN	Data Raw: 89 36 5a dc 05 4e 77 61 3d df b2 85 05 05 28 02 0e fa ed 78 69 a8 66 ba 3c 18 f1 7a 32 c6 77 57 19 29 7c 17 99 a7 a4 70 2a f4 ba 38 57 54 bb ec 79 94 7b ea 9b 4d ff 00 09 31 44 98 e1 97 10 e3 3e 26 1e 69 b5 91 ca 09 05 01 59 03 6c e0 eb 2e c6 6e Data Ascii: 6ZNwa=(xif<z2wW)\|p8WTy{M1D>&iYl.n9ftKVkGBod9lJK-xF[9EA)k'd U=pG.&,5)Ux@es=-baN10hB"8e'%'#WTcR^
Apr 26, 2024 06:10:48.051388025 CEST	1288	IN	Data Raw: b4 d3 fc 95 bc 08 44 eb 95 eb fb 8d 15 06 ad 0b 55 7d ed 6a b4 e9 a4 d3 5b 04 ba 43 8f 28 a1 21 23 a1 c1 c9 ce 00 00 e7 d7 5e 73 8a 9d 4f 57 99 f6 10 94 70 b8 45 2a ce d9 52 bd fc c7 55 37 84 17 dd c1 7e cb b3 e8 d5 db 7e 6d e1 11 a7 7b ca 34 39 Data Ascii: DU}j[C(!#^sOWpERU7~~m{49Oee=`]SnYVsJ5j&)lj.(}'H'w$A?pr\AvL.:f-nN6R]XBTMvS3((TQ
Apr 26, 2024 06:10:48.051469088 CEST	1288	IN	Data Raw: 4f 05 6b e8 bf e2 6e b8 33 58 47 69 ae c6 b7 67 06 6f 57 5b aa 5e 96 f3 02 65 ad 51 9a 79 9f e5 19 ee 95 cc ad f2 95 e1 b2 7f 21 43 3e ee a2 94 9e 22 93 a6 f7 e4 73 e3 a8 fa 23 1f 4f 19 45 5a 0f 47 f1 19 5d 89 e9 0c 37 da ce f5 8b 55 8a 1a ba 29 Data Ascii: Okn3XGigoW[^eQy!C>"s#OEZG]7U)0xnPu6G4JIkje&Ks[}4MyUg#}qB>vR)8V>w&-%ZRgo]txFx\|n(N'{v=L<*
Apr 26, 2024 06:10:48.252731085 CEST	1288	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:47 GMT Content-Type: image/jpeg Content-Length: 23471 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:18 GMT x-rgw-object-type: Normal ETag: "c699c1125a9efaf6a5c1c284228c071f" x-amz-request-id: tx000005a3976a57c545f7b-00662b2408-e95274c-sfo1 X-Storage-Bucket: z0be5 X-Storage-Object: 0be5ae8e8f1310331ffcf5569b1c64652b0f48d21d29dc45fdf224049dc7b1a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 b9 01 03 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 07 01 06 08 00 02 04 05 09 03 0a ff c4 00 59 10 00 01 03 03 02 03 05 03 06 06 0c 0a 08 07 01 00 01 02 03 04 05 06 11 00 21 07 12 31 08 13 22 41 51 14 32 61 09 15 23 42 71 91 16 33 52 81 a1 b4 17 24 25 34 38 43 62 72 92 b1 c1 d1 35 37 53 73 74 75 76 b2 b3 f0 0a 18 36 44 54 63 77 82 26 39 64 84 93 c2 e1 f1 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 11 00 02 01 02 04 03 04 06 07 07 03 05 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 14 a1 d1 15 22 32 61 71 81 06 33 43 52 53 91 b1 16 23 35 42 72 c1 f0 24 34 b2 36 44 82 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ef ab 89 43 8d 94 2c 02 92 39 48 3d 08 f4 d6 4d 67 83 44 ad 0e 2c 76 a3 f9 39 ab bc 43 ac 49 b8 b8 5c fb 5f 39 b3 21 6e c7 65 d7 83 4e 30 79 b9 8b 3b 8f 1a 49 39 4a b2 30 32 35 cf 85 8c a9 c9 a7 b1 69 7a da 90 0a a1 ff 00 58 1e 07 cf 5d 17 8a 9c 3b ac 32 a8 49 09 15 54 30 a1 b7 97 33 98 28 58 23 7f 7b 53 5b 05 4d bc d0 dc 2a 99 74 37 f4 be d4 36 fa 59 42 2b 30 65 21 23 a9 5c 72 09 f8 9c 64 1d 79 b2 c0 56 be 86 8a aa be a6 9a f0 ed 23 6d 3b 1a 9c 6c d7 a9 6c 12 e6 27 1a 94 35 f3 24 79 91 b6 35 5e e9 89 da d6 34 ed 69 9e f2 bb 4f 70 e1 9a 02 58 34 c4 d7 2a 61 18 71 71 e1 94 b2 4f 96 01 d5 d6 0a bc b7 76 2a ea c1 02 ca af 17 6e 1b da a0 69 f6 55 97 32 5a 97 80 88 90 e3 14 a4 ab a0 e6 08 f1 2b 7f 2d b5 d9 4f 05 38 bd 5d cc 1d 58 bd 82 15 9d d9 2f 8d 3c 40 b8 a9 15 8e 2b 53 25 d0 ad c4 1c c5 Data Ascii: JFIFHHCCY!1"AQ2a#Bq3R$%48Cbr57Sstuv6DTcw&9d?!1AQ"2aq3CRS#5Br$46D?C,9H=MgD,v9CI\_9!neN0y;I9J025izX];2IT03(X#{S[Mt76YB+0e!#\rdyV#m;ll'5$y5^4iOpX4aqqOv*niU2Z+-O8]X/<@+S%
Apr 26, 2024 06:10:48.274889946 CEST	1287	IN	Data Raw: 84 24 03 f7 9f 8e b8 9e 9a b0 46 5a f5 a1 2a 96 b1 50 78 77 32 c2 c1 28 f3 c8 f5 d6 8a a2 44 d9 a0 8d c3 7b 45 da d9 76 ad 6f 56 57 4b b8 58 f1 32 90 ae 50 55 d7 07 ed d6 8e ad 96 e4 13 db 83 3c 73 ac 4b a4 9a 6d 74 ad 15 7a 7b a6 3c a6 d5 ef 05 Data Ascii: $FZPxw2(D{EvoVWKX2PU<sKmtz{<N<8B7@3S)-yir1^8SxWk?1jjcnG7:htGuP$Nv\|pW'xz+nDlG#(8H6+j
Apr 26, 2024 06:10:48.274943113 CEST	1288	IN	Data Raw: d7 bb 2e df 94 a9 8c a6 43 0f d1 5f 05 b5 0c 82 42 09 1f a4 6b 3a fe c9 27 0a ad 07 d3 43 62 34 26 5b 54 26 bb f5 77 6a 4f b8 0e 7a 1d 70 59 38 fa c0 90 ed ab da e9 0d b8 e1 41 59 dd 79 3b 7d be 9a f3 65 04 a4 6f 17 a0 04 be 2b 16 8a 6e 14 48 a5 Data Ascii: .C_Bk:'Cb4&[T&wjOzpY8AYy;}eo+nH<{KBhV[WWqVJu]'*O!E&du#E([(H?NBPV'Hh>X;yE-?6~5]@g+)i
Apr 26, 2024 06:10:49.566474915 CEST	408	OUT	GET /files/theme/custom.js?1530561231 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:49.795128107 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 02 Jan 2020 17:35:32 GMT x-rgw-object-type: Normal ETag: W/"5da53b567e46be3a2bd71096fb2995bc" x-amz-request-id: tx00000fbe8727843c894dc-00652558da-db1eedd-sfo1 X-Storage-Bucket: z5feb X-Storage-Object: 5feb822d8698f127f0f85d3edf620c63ff5189509fb85992c1d74abbd25d83ee Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 37 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 6d 8f db 36 12 fe 7c fb 2b 58 ed 02 92 b1 96 76 5b 20 b9 20 ce 06 68 37 4d 1b 20 db b7 04 b8 03 0e f7 81 96 c6 36 1b 4a 54 25 ca 5e 37 f1 7f ef 8c 48 59 d4 8b bd de f6 2e 35 90 ac 6c 71 de 67 1e 3e e4 af 3f 57 50 6c 83 45 95 c5 5a a8 2c 98 b0 8f 67 0c 3f 67 ff 58 f3 82 5d b0 1b f6 6b bd 62 66 7e a5 ff e8 c5 fb 15 a4 80 2f cd 62 c6 44 a6 a1 58 73 f9 9c ed 35 c5 2a 4b 04 3d 4d 19 8f cd df a4 2a b8 79 92 22 15 7a b2 17 37 4a 63 55 91 1a 54 7b 3d eb bc 90 4a e5 f5 ef 25 e8 37 d6 92 e3 72 ab 05 1d 59 b0 a0 d1 f3 f2 c6 d8 61 9f 3e 19 87 a3 78 05 f1 87 6f 25 3e 66 ba 75 70 e2 3a 42 9f 58 02 2f f6 86 8c f5 c9 cc 59 b2 63 20 4b e8 49 71 eb ce ac ab cb 38 73 79 d9 91 df 3f ef da ac ec 05 77 53 fb e0 ba eb 64 b6 04 09 b1 56 85 eb 76 01 ba 2a 32 76 d1 be 8c 24 64 4b bd 1a 28 4d d5 1a ee 44 26 62 5e b8 4a fb c5 a0 65 98 f1 8b c0 3b df 94 42 43 98 a2 4c 48 42 de 24 4a 40 f3 78 e5 86 4a eb 32 be 16 cb 3a 14 5c c2 f3 1c b2 24 20 35 93 51 1f 5e cb ad aa 1e e7 01 64 55 f9 17 ac 9f b5 ff 9f 9d 19 b1 44 c5 15 65 77 12 15 c0 93 b1 39 70 1b eb 22 d8 88 2c 51 9b 49 b4 11 89 46 0f a8 c5 fe f9 f4 59 b7 7f 4c ab 35 13 d1 f1 8c 0d 72 39 b5 cb dd aa 4c d9 93 eb eb 29 7b d6 e9 a4 53 b4 d6 f9 71 35 9a 1c 8f e8 6b 1b b0 1b e5 d5 15 fb 0e 32 28 b8 64 a5 de 4a 91 2d cf 9c 24 fb 73 95 6c 7d cc 6e 92 dc 4a 5e 96 81 9f ab 52 4b c5 13 df d1 ed 2a bb 53 73 21 81 91 67 c3 f7 54 b5 b4 5e 80 15 8b a5 88 3f b4 f9 87 49 77 b8 20 ca 0b 58 63 a5 5e c1 82 57 52 f7 c7 6c d0 01 5a 2d 97 12 8c 9b 1e dc e7 3c 4b 20 f1 7a 52 a6 a8 3d c9 15 2f 07 62 7d 84 18 9a 0c 37 05 cf 29 0e 14 fc e8 a5 fc 3e 5c 81 58 ae b4 f7 dc ed 1b f3 1b 36 4e 88 35 99 5c 32 2f bf f7 76 93 59 5f f5 21 5b 6d b6 4e b5 f2 e5 f5 a9 66 76 dd 7c 0f f1 ed f4 80 bd eb 87 ed 39 10 e8 f6 4e a7 79 78 a9 57 38 96 ee 6f e1 ff e5 73 75 35 da bd ef 34 f6 e4 96 fd c0 d7 1d 18 f8 02 13 41 93 80 c1 0b ec Data Ascii: 771Xm6\|+Xv[ h7M 6JT%^7HY.5lqg>?WPlEZ,g?gX]kbf~/bDXs5K=My"z7JcUT{=J%7rYa>xo%>fup:BX/Yc KIq8sy?wSdVv2v$dK(MD&b^Je;BCLHB$J@xJ2:\$ 5Q^dUDew9p",QIFYL5r9L){Sq5k2(dJ-$sl}nJ^RKSs!gT^?Iw Xc^WRlZ-<K zR=/b}7)>\X6N5\2/vY_![mNfv\|9NyxW8osu54A
Apr 26, 2024 06:11:10.525043011 CEST	785	OUT	GET /uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.824790001 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/jpeg Content-Length: 6375 Connection: keep-alive Last-Modified: Fri, 18 Jan 2019 00:54:22 GMT x-rgw-object-type: Normal ETag: "d09a424d28a5f05c4497ac8ff6bb8043" x-amz-request-id: tx00000d1620ea6b3dad6e3-00662b295e-e9549c7-sfo1 X-Storage-Bucket: zf5c3 X-Storage-Object: f5c3c0429a9d66ceadd651f9e41ba479cd1ce5f5eba9adda8430b26d23fa8153 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 0b 07 08 09 08 07 0b 09 09 09 0c 0b 0b 0d 10 1a 11 10 0f 0f 10 20 17 18 13 1a 26 22 28 28 26 22 25 24 2a 30 3d 33 2a 2d 39 2e 24 25 35 48 35 39 3f 41 44 45 44 29 33 4b 50 4a 42 4f 3d 43 44 41 ff db 00 43 01 0b 0c 0c 10 0e 10 1f 11 11 1f 41 2c 25 2c 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 ff c0 00 11 08 01 06 00 c4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 01 02 03 04 06 07 08 ff c4 00 34 10 00 01 04 01 04 01 03 04 01 02 05 04 03 00 00 00 01 00 02 03 11 04 05 12 21 31 41 06 13 51 22 32 61 71 14 23 81 33 42 52 91 a1 07 24 34 62 c1 f0 f1 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff c4 00 1f 11 01 01 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 01 11 02 03 21 31 12 04 22 32 41 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 95 20 90 0e 83 32 01 20 12 01 20 11 3c 72 96 8c 51 36 64 31 7d d2 0b f8 09 68 c6 73 a9 b2 ec 30 d2 34 f1 13 aa 30 74 11 a1 6c 79 81 ff 00 a4 c3 5c 74 f1 76 8d 2c 3b a3 a4 68 c4 2f c2 06 19 30 56 80 6b 40 35 a0 12 08 e8 33 5a 01 5a 01 5a 01 5a 02 e4 11 20 12 0c 90 44 83 22 90 65 cd cd 8f 15 84 b8 f3 f0 95 a7 80 19 9a c4 b2 b8 86 be 87 e1 4e aa 46 17 67 b7 75 72 e7 a4 16 fb d2 38 5b 9c 53 0b 20 98 34 dd 72 98 5e 32 e5 1d 70 80 d9 8d 92 f8 c8 dc ea 3d 9e 50 31 73 b5 37 bd ae 73 08 2d 68 40 3e 2e a2 d9 bf 07 e0 a0 9b 5b 23 5c 07 3c 94 f4 92 29 e9 19 30 48 04 82 24 19 90 09 00 90 09 20 b8 94 c8 ad 00 90 0a d0 0a d0 6c 99 f9 8c c6 61 e4 6f a5 36 9c 8e 47 50 cd 7c f2 90 4d 92 54 ae 40 f9 a7 2d eb b4 8d 66 23 76 9d e7 97 1e 50 1a 3d d3 bc d9 ef a0 99 2d 64 bb 07 c9 4c 93 fe 43 63 3b 9e 6e f9 40 54 ec 99 26 3b 00 da 4f 7c a0 0d b2 26 61 e1 47 1b a4 3b e4 1c d7 c2 02 dc 0c 56 6f 74 71 82 ed c7 b2 80 d6 d0 64 9e 5a 14 23 fa 47 ed 05 8d 51 ee bd ae e4 d7 34 88 58 72 ac 8c 80 48 22 41 99 00 90 09 00 92 09 17 26 45 bd Data Ascii: JFIFHHC &"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDACA,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4!1AQ"2aq#3BR$4b!1"2A? 2 <rQ6d1}hs040tly\tv,;h/0Vk@53ZZZZ D"eNFgur8[S 4r^2p=P1s7s-h@>.[#\<)0H$ lao6GP\|MT@-f#vP=-dLCc;n@T&;O\|&aG;VotqdZ#GQ4XrH"A&E
Apr 26, 2024 06:11:10.875472069 CEST	777	OUT	GET /uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:11.152329922 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 107393 Connection: keep-alive Last-Modified: Mon, 13 Sep 2021 00:55:57 GMT x-rgw-object-type: Normal ETag: "2453f8ec1eafcc298b1380b732ce7cc7" x-amz-request-id: tx0000010cd8d768acedaa3-00662b295e-e9549c7-sfo1 X-Storage-Bucket: zdb27 X-Storage-Object: db2766550eece9913775b21ce4f796d0ac6bbf748aa5449fe126cf6e8066f67f Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 8a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 00 00 04 00 00 00 01 00 00 0d f2 01 01 00 04 00 00 00 01 00 00 09 d9 87 69 00 04 00 00 00 01 00 00 00 3e 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 02 90 03 00 02 00 00 00 14 00 00 00 5c 92 08 00 04 00 00 00 01 00 00 00 00 00 00 00 00 32 30 32 31 3a 30 39 3a 31 31 20 30 39 3a 32 30 3a 30 36 00 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 54 52 43 00 00 01 cc 00 00 00 40 67 54 52 43 00 00 01 cc 00 00 00 40 62 54 52 43 00 00 01 cc 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 03 63 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 46 42 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 Data Ascii: JFIFExifMM*i>\2021:09:11 09:20:06ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZrTRC@gTRC@bTRC@descc2textFBXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)
Apr 26, 2024 06:11:17.684720039 CEST	1008	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/research.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:17.957328081 CEST	627	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:17 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu8.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=49 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:25.542253017 CEST	683	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:25.769711018 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn134.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:25.805824041 CEST	749	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-3.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.114679098 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 29880 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:58:22 GMT x-rgw-object-type: Normal ETag: "b36be0d65067ff41cac79a6a57bebe40" x-amz-request-id: tx00000a50f56b80fd1efaf-00662b296d-e8f4575-sfo1 X-Storage-Bucket: z8693 X-Storage-Object: 8693b7ce5edbb74e61224678849be8c321e2c601fd04f207f2f21a1d3900a77f Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.136893988 CEST	775	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.440963030 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 63882 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:53 GMT x-rgw-object-type: Normal ETag: "cd1007ea2a611e50f0b6bab39b7d8b41" x-amz-request-id: tx00000c13ab9b268031a24-00662b296e-e8f4575-sfo1 X-Storage-Bucket: zb647 X-Storage-Object: b647ed1fffec93b834ef7aac865ad15b3fada635f58fec743daf6cbe0f95b776 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49738	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.566476107 CEST	408	OUT	GET /files/theme/mobile.js?1530561231 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:49.795304060 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 23 Jul 2019 14:31:29 GMT x-rgw-object-type: Normal ETag: W/"07e9e6c62f36b3d745591589ed2c0103" x-amz-request-id: tx00000c1193c183b0efd7e-006514a8eb-db1c716-sfo1 X-Storage-Bucket: ze35c X-Storage-Object: e35cdae965132932644d580706fba96e1b54e9affbe3abab406e54e95d17a0cd Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 31 32 35 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 73 db c6 f1 33 f9 2b ce 8a 53 80 09 49 51 f5 34 d3 91 6d a5 8a e4 34 9e da b5 6b a9 e3 b6 99 8c 07 04 8e 22 6c 10 c7 02 a0 68 35 d6 7f ef 3e ee 09 80 34 9d 4e 95 89 25 e0 f6 f6 6e f7 f6 bd 87 b7 52 ce 8b 3b f1 54 bc e5 3f 3e 7d 12 bf de 3f 1e 0e f9 71 ba 52 f3 bc 90 ef ca e4 36 bf 49 9a 5c 95 00 19 2f 36 65 8a 7f c7 0f 47 e2 d7 e1 70 70 9b 54 e2 ea c5 f3 cb 67 ef de 3c ff f3 4f d7 00 72 e4 3d 1e 8d 87 83 01 3f 5f be 7a fb 57 37 8a 4f de e0 d5 f5 f9 f5 f3 0b 37 cc cf 04 f0 fc d5 d5 bb f3 cb cb 37 cf ae ae de fd 70 fe e6 dd 4f cf f4 3a df cd 1e eb f5 f3 fa d5 5a e2 ee 16 49 51 4b 9c 94 d7 2f d5 6d 5e de f8 ef ea cd 7a ad aa a6 be 56 9b 74 e9 0f c0 dc 0c 60 df c8 3a ff 8f bc 4c 9a 04 06 cb 4d 51 30 a2 fc d5 15 d2 2d 34 1b 54 35 dd d4 b2 3a bf 91 65 33 5d 25 4d ba 8c 8f e3 fc 75 92 7d ca 5f 2f 55 29 e1 97 ca 46 c7 f9 48 7c 2f 9a 6a 23 c5 29 2f 24 46 fe 1e 1e 5d 22 ce e8 ad 9c ff 25 6f 2e ae ae 5e 26 4d 95 7f 8c 44 5e 8a 6d 5e 66 6a 2b 7e f7 3b 11 ad 4e 4e e8 55 29 b7 a2 05 1a 8f 46 7b 69 5a c9 72 f3 6a b1 a8 65 f3 4f 78 3d c3 57 40 c0 55 73 57 48 78 f6 99 8c 43 0f 11 fc 6d 95 ac d7 b2 1a 0b 7a fa 61 d3 34 aa d4 0f f0 6b ae b2 bb b1 70 fb 07 de 0f 05 fc 1c 7f f3 0d fd fe 46 9c 67 99 48 44 5a d7 40 77 52 d6 39 4a 09 0f 69 80 3f ad 93 2a 59 89 f7 ff de c8 ea 4e 3c 54 42 cd df cb b4 11 8d 12 49 99 03 2f 65 08 58 03 a1 70 84 eb 4a c1 b6 9a bb 0e f2 64 0e c4 98 d1 70 6a b9 59 cd 65 25 ea b5 94 99 68 96 52 ac 6a fd a0 16 7a 31 bb 3b 33 c7 48 b6 48 e7 22 4d 8a 62 9e a4 1f dc cb 64 d1 00 42 3b 55 a4 6a b5 2e 64 23 6b 83 a4 92 cd a6 2a c5 a6 cc e4 22 2f 65 c6 ef 8f 87 03 c1 42 9a 64 d9 b5 dd 3a 1e 95 55 24 35 b6 54 8c 79 97 63 d8 03 aa 17 c8 df 42 c4 0f e8 1d 3f 0f 98 8a a7 e2 0f 33 10 ff c1 e0 7e 88 c7 a7 a6 c0 99 98 c6 b7 72 fe 21 6f dc 4a 97 9b 8a 37 7c aa 19 f0 2d c8 55 1d 8d fb 60 5f 1b 4e 9f ba 0d f5 c1 5d e7 2b Data Ascii: 125fks3+SIQ4m4k"lh5>4N%nR;T?>}?qR6I\/6eGppTg<Or=?_zW7O77pO:ZIQK/m^zVt`:LMQ0-4T5:e3]%Mu}_/U)FH\|/j#)/$F]"%o.^&MD^m^fj+~;NNU)F{iZrjeOx=W@UsWHxCmza4kpFgHDZ@wR9Ji?YN<TBI/eXpJdpjYe%hRjz1;3HH"MbdB;Uj.d#k"/eBd:U$5TycB?3~r!oJ7\|-U`_N]+
Apr 26, 2024 06:10:49.795315027 CEST	79	IN	Data Raw: 38 98 1f 0d 6b 4e 45 54 00 c5 49 15 e1 86 46 a8 95 44 31 00 d2 94 1a a1 9e 95 99 4f b4 d4 e4 c0 d6 d5 62 11 47 ed 25 00 3c 1a 77 30 30 ee 80 de 7d 04 47 4c e6 3e 3a 77 81 74 49 44 e2 88 3a f8 85 ff a7 f3 78 c4 27 c0 54 94 5f 40 c4 00 ad Data Ascii: 8kNETIFD1ObG%<w00}GL>:wtID:x'T_@
Apr 26, 2024 06:10:49.795635939 CEST	1289	IN	Data Raw: ec 00 55 67 00 a2 f3 f7 26 2f 72 94 6f 56 02 27 73 0b 55 b5 44 be c6 09 34 e9 00 65 f2 c0 f4 e0 a2 52 2b c2 a8 8f 37 97 b5 37 81 86 7b 66 01 c4 ee 39 8d f2 67 1c a8 77 83 ff 5d eb 06 bd 3a 37 20 8d 23 75 d3 fb 6b 29 1a 92 38 86 4d ff 06 45 63 18 Data Ascii: Ug&/roV'sUD4eR+77{f9gw]:7 #uk)8MEcg9i$q:'-`A4mA4D'xH58C_(IntV),RU6yx?XQaTSLc1c#t\|<5e>#hXJERm
Apr 26, 2024 06:10:49.795829058 CEST	79	IN	Data Raw: 72 40 97 0b e0 19 68 be b0 6c de 97 d1 87 b1 89 f6 61 bc d2 38 34 f5 a3 2f 0b 86 5b 01 6b 4f 14 3c e6 20 f6 7f 0b 84 3b 21 70 2f d6 03 a2 e0 42 2e 1a e0 9e bf c7 9e 88 37 80 c2 15 5b d1 ed de e2 89 89 7c 3d e3 b9 27 f2 1d ee 3a 03 3c 82 Data Ascii: r@hla84/[kO< ;!p/B.7[\|=':<
Apr 26, 2024 06:10:49.796068907 CEST	1289	IN	Data Raw: 20 dd bf c6 8c ca 4b f6 69 93 a0 33 15 2a e3 ce 22 5d 91 5d 15 20 58 34 2d dd 54 15 66 f9 35 bd 99 4b 14 5e 8c 68 33 01 4b f7 cd 2e e5 d6 cd c6 96 40 77 66 1e 94 d6 e6 4a 15 bc a1 6b f5 02 f7 87 40 a8 c0 88 80 de a3 b6 60 8a 3d e6 fd c3 13 c5 de Data Ascii: Ki3*"]] X4-Tf5K^h3K.@wfJk@`=8P>,ycI<sIu[!u~C=crrHU;"3Vd8Ov3l-aW,'gdb`MLgle'k"<hpmkfP&-
Apr 26, 2024 06:10:49.796257019 CEST	79	IN	Data Raw: 5d 72 64 8b 44 cc bc b7 e1 55 37 a5 0e a7 7d 59 fa 7f ef ee 44 70 88 86 02 d9 ef 4f c3 3a 4d e8 53 db 7a 7f 48 81 a7 6f 9e a6 dc 93 b4 4a c2 ae 31 63 10 fb 58 d0 8b c6 72 02 ed ea 02 02 fc 09 45 ae 74 f5 2e 72 25 5c 7b bb a7 8b 46 33 c3 Data Ascii: ]rdDU7}YDpO:MSzHoJ1cXrEt.r%\{F3
Apr 26, 2024 06:10:49.796315908 CEST	1270	IN	Data Raw: 72 58 5b 1f 27 69 78 e7 a2 53 83 04 dd 71 30 82 58 41 89 d0 d8 74 75 b0 0a 78 5e a6 4b 45 7c 32 90 d4 3d 8c 0d d4 a6 f0 9c 86 0f 95 82 1c 66 80 21 8e 36 45 64 71 c2 d4 5c 6d 6a 6d d6 3d 9c b4 58 dd 13 c6 47 5e 71 81 e2 9a 17 79 f9 81 cf ed 49 91 Data Ascii: rX['ixSq0XAtux^KE\|2=f!6Edq\mjm=XG^qyI)B<tsA$9{S* N`D~t!<N2<9.3'%D{El!4\KrB`ZZ`//gV0s<_%5dXe*`c'+2dcf?dj
Apr 26, 2024 06:10:49.997163057 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 23 Jul 2019 14:31:29 GMT x-rgw-object-type: Normal ETag: W/"07e9e6c62f36b3d745591589ed2c0103" x-amz-request-id: tx00000c1193c183b0efd7e-006514a8eb-db1c716-sfo1 X-Storage-Bucket: ze35c X-Storage-Object: e35cdae965132932644d580706fba96e1b54e9affbe3abab406e54e95d17a0cd Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 31 32 35 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 73 db c6 f1 33 f9 2b ce 8a 53 80 09 49 51 f5 34 d3 91 6d a5 8a e4 34 9e da b5 6b a9 e3 b6 99 8c 07 04 8e 22 6c 10 c7 02 a0 68 35 d6 7f ef 3e ee 09 80 34 9d 4e 95 89 25 e0 f6 f6 6e f7 f6 bd 87 b7 52 ce 8b 3b f1 54 bc e5 3f 3e 7d 12 bf de 3f 1e 0e f9 71 ba 52 f3 bc 90 ef ca e4 36 bf 49 9a 5c 95 00 19 2f 36 65 8a 7f c7 0f 47 e2 d7 e1 70 70 9b 54 e2 ea c5 f3 cb 67 ef de 3c ff f3 4f d7 00 72 e4 3d 1e 8d 87 83 01 3f 5f be 7a fb 57 37 8a 4f de e0 d5 f5 f9 f5 f3 0b 37 cc cf 04 f0 fc d5 d5 bb f3 cb cb 37 cf ae ae de fd 70 fe e6 dd 4f cf f4 3a df cd 1e eb f5 f3 fa d5 5a e2 ee 16 49 51 4b 9c 94 d7 2f d5 6d 5e de f8 ef ea cd 7a ad aa a6 be 56 9b 74 e9 0f c0 dc 0c 60 df c8 3a ff 8f bc 4c 9a 04 06 cb 4d 51 30 a2 fc d5 15 d2 2d 34 1b 54 35 dd d4 b2 3a bf 91 65 33 5d 25 4d ba 8c 8f e3 fc 75 92 7d ca 5f 2f 55 29 e1 97 ca 46 c7 f9 48 7c 2f 9a 6a 23 c5 29 2f 24 46 fe 1e 1e 5d 22 ce e8 ad 9c ff 25 6f 2e ae ae 5e 26 4d 95 7f 8c 44 5e 8a 6d 5e 66 6a 2b 7e f7 3b 11 ad 4e 4e e8 55 29 b7 a2 05 1a 8f 46 7b 69 5a c9 72 f3 6a b1 a8 65 f3 4f 78 3d c3 57 40 c0 55 73 57 48 78 f6 99 8c 43 0f 11 fc 6d 95 ac d7 b2 1a 0b 7a fa 61 d3 34 aa d4 0f f0 6b ae b2 bb b1 70 fb 07 de 0f 05 fc 1c 7f f3 0d fd fe 46 9c 67 99 48 44 5a d7 40 77 52 d6 39 4a 09 0f 69 80 3f ad 93 2a 59 89 f7 ff de c8 ea 4e 3c 54 42 cd df cb b4 11 8d 12 49 99 03 2f 65 08 58 03 a1 70 84 eb 4a c1 b6 9a bb 0e f2 64 0e c4 98 d1 70 6a b9 59 cd 65 25 ea b5 94 99 68 96 52 ac 6a fd a0 16 7a 31 bb 3b 33 c7 48 b6 48 e7 22 4d 8a 62 9e a4 1f dc cb 64 d1 00 42 3b 55 a4 6a b5 2e 64 23 6b 83 a4 92 cd a6 2a c5 a6 cc e4 22 2f 65 c6 ef 8f 87 03 c1 42 9a 64 d9 b5 dd 3a 1e 95 55 24 35 b6 54 8c 79 97 63 d8 03 aa 17 c8 df 42 c4 0f e8 1d 3f 0f 98 8a a7 e2 0f 33 10 ff c1 e0 7e 88 c7 a7 a6 c0 99 98 c6 b7 72 fe 21 6f dc 4a 97 9b 8a 37 7c aa 19 f0 2d c8 55 1d 8d fb 60 5f 1b 4e 9f ba 0d f5 c1 5d e7 2b Data Ascii: 125fks3+SIQ4m4k"lh5>4N%nR;T?>}?qR6I\/6eGppTg<Or=?_zW7O77pO:ZIQK/m^zVt`:LMQ0-4T5:e3]%Mu}_/U)FH\|/j#)/$F]"%o.^&MD^m^fj+~;NNU)F{iZrjeOx=W@UsWHxCmza4kpFgHDZ@wR9Ji?YN<TBI/eXpJdpjYe%hRjz1;3HH"MbdB;Uj.d#k"/eBd:U$5TycB?3~r!oJ7\|-U`_N]+
Apr 26, 2024 06:10:50.019206047 CEST	1289	IN	Data Raw: ec 00 55 67 00 a2 f3 f7 26 2f 72 94 6f 56 02 27 73 0b 55 b5 44 be c6 09 34 e9 00 65 f2 c0 f4 e0 a2 52 2b c2 a8 8f 37 97 b5 37 81 86 7b 66 01 c4 ee 39 8d f2 67 1c a8 77 83 ff 5d eb 06 bd 3a 37 20 8d 23 75 d3 fb 6b 29 1a 92 38 86 4d ff 06 45 63 18 Data Ascii: Ug&/roV'sUD4eR+77{f9gw]:7 #uk)8MEcg9i$q:'-`A4mA4D'xH58C_(IntV),RU6yx?XQaTSLc1c#t\|<5e>#hXJERm
Apr 26, 2024 06:10:50.019278049 CEST	79	IN	Data Raw: 72 40 97 0b e0 19 68 be b0 6c de 97 d1 87 b1 89 f6 61 bc d2 38 34 f5 a3 2f 0b 86 5b 01 6b 4f 14 3c e6 20 f6 7f 0b 84 3b 21 70 2f d6 03 a2 e0 42 2e 1a e0 9e bf c7 9e 88 37 80 c2 15 5b d1 ed de e2 89 89 7c 3d e3 b9 27 f2 1d ee 3a 03 3c 82 Data Ascii: r@hla84/[kO< ;!p/B.7[\|=':<
Apr 26, 2024 06:10:50.019443035 CEST	1289	IN	Data Raw: 20 dd bf c6 8c ca 4b f6 69 93 a0 33 15 2a e3 ce 22 5d 91 5d 15 20 58 34 2d dd 54 15 66 f9 35 bd 99 4b 14 5e 8c 68 33 01 4b f7 cd 2e e5 d6 cd c6 96 40 77 66 1e 94 d6 e6 4a 15 bc a1 6b f5 02 f7 87 40 a8 c0 88 80 de a3 b6 60 8a 3d e6 fd c3 13 c5 de Data Ascii: Ki3*"]] X4-Tf5K^h3K.@wfJk@`=8P>,ycI<sIu[!u~C=crrHU;"3Vd8Ov3l-aW,'gdb`MLgle'k"<hpmkfP&-
Apr 26, 2024 06:10:50.019453049 CEST	79	IN	Data Raw: 5d 72 64 8b 44 cc bc b7 e1 55 37 a5 0e a7 7d 59 fa 7f ef ee 44 70 88 86 02 d9 ef 4f c3 3a 4d e8 53 db 7a 7f 48 81 a7 6f 9e a6 dc 93 b4 4a c2 ae 31 63 10 fb 58 d0 8b c6 72 02 ed ea 02 02 fc 09 45 ae 74 f5 2e 72 25 5c 7b bb a7 8b 46 33 c3 Data Ascii: ]rdDU7}YDpO:MSzHoJ1cXrEt.r%\{F3
Apr 26, 2024 06:11:10.333652973 CEST	775	OUT	GET /uploads/1/0/3/6/10363185/background-images/974213796.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.563227892 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000020b699e9e58b9ed8-006627f2d1-e9549c7-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:25.550134897 CEST	749	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:25.855775118 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: image/jpeg Content-Length: 63468 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:04 GMT x-rgw-object-type: Normal ETag: "68dc79a220f880eab7576508e798fc57" x-amz-request-id: tx00000cbfb1f10f7800fa2-00662b296d-e8f4575-sfo1 X-Storage-Bucket: za5d0 X-Storage-Object: a5d063c78600f8195499e6fc4ddfa07bae4bcb7fc9ce8952744ee03b45e3fef6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:39.008578062 CEST	761	OUT	GET /referrals.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Apr 26, 2024 06:11:39.273057938 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:39 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:39 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"97b722074e49064db4dd4e84d491d0f3-gzip" Content-Encoding: gzip X-Host: grn39.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7605 Keep-Alive: timeout=10, max=60 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 69 77 db 38 92 9f e5 f7 f6 3f a0 d9 b3 a1 dc ad 83 d4 7d 58 ea 71 1c a7 27 fd 3a 89 3b 76 b6 77 36 ce ea 41 14 24 31 a6 48 86 87 1d 8d a3 ff be 55 00 78 49 94 2d c7 ce 74 b2 cf 3d 13 8b 04 0a 55 85 42 a1 50 05 82 c5 83 1f 9e bd 3e 3a fb e7 c9 31 99 07 0b 6b b8 77 80 3f c4 a2 f6 6c a0 30 5b 19 ee 15 0e e6 8c 4e e0 b7 70 10 98 81 c5 86 cf 1c 23 70 3c f2 86 4d 99 e7 51 8b 9c d0 19 23 65 f2 d4 33 fd 31 b5 19 dc 9b 36 d4 ce e9 d8 b4 cc 80 06 a6 63 93 53 e6 5d 9a 06 3b a8 0a 14 07 0b 16 50 e2 7a 8e cb bc 60 39 50 9c 59 cf 37 03 36 b2 e9 82 29 c4 70 ec 80 d9 c1 40 d9 05 a5 42 aa c0 f4 26 3e 4e 28 85 2b 8f eb 6d 6d 27 cc 37 3c d3 45 32 29 0c cf a1 f9 84 63 f1 49 e0 90 a9 69 59 c4 b4 4b c4 8b 50 3a 53 e2 02 6f 00 0c e5 00 c1 b9 7e 49 6d a0 b4 c0 c2 13 cf 99 79 74 b1 8d aa b9 e0 2c c5 f4 e6 41 e0 f6 aa d5 ab ab ab 8a 0b 98 bc 4c f7 2b 86 b3 a8 d0 b0 1a ba 96 43 27 7e 55 af 6a d5 7a b5 55 d5 b5 7a ab ae 77 9a d5 b1 eb f9 65 cb 99 39 95 0f ee 6c 1b c9 d0 b3 ee 4a 30 ea ad 5f 41 45 e1 88 25 66 1c bc 81 f2 6f 90 9d a4 87 ec 96 d9 c7 d0 bc 1c 28 47 82 50 f9 6c e9 a6 45 18 b0 4f 41 15 f9 ec 13 63 4e 3d 9f 05 83 30 98 96 3b 4a 2c 0e c1 f4 a5 c9 ae 5c c7 0b 52 4d af cc 49 30 1f 4c 18 ea 58 99 df 94 80 33 33 30 a9 55 f6 0d 6a b1 81 5e d1 4a 0b 28 5a 40 49 68 c2 4c 81 29 82 b3 c4 32 ed 0b 62 4e 00 05 ea 74 79 4c 7d 56 f6 83 25 6a a3 c7 ac 81 c2 af fd 39 63 40 2e 00 7e 25 9b 86 ef 2b 64 0e 02 19 28 d5 aa 31 b1 6b 15 36 31 83 c5 12 91 a0 f0 11 a0 8a 37 7e 05 ae 7e 19 87 a6 35 39 33 81 7b bd d5 68 d4 5b 7a a7 51 13 c3 cc e9 df 9b 92 63 4d aa 53 6a 1b cb b1 f3 89 13 fc 3a 64 7c c7 40 89 9a 20 f7 54 bf 82 f5 7e 2d a0 29 05 4a 86 c7 98 5d 02 1d fe c0 0c a1 62 77 66 05 74 8f f9 d5 05 e8 d7 88 43 27 9d 6b b7 f5 56 17 da a1 e5 88 46 2f 98 83 fe 95 79 fb 98 12 47 a4 56 ab 53 d0 15 bf 32 73 9c 99 c5 a8 6b fa 51 a7 7e 99 d2 85 69 2d 07 47 30 7d ec 5e 43 d3 4a 6d f8 07 bf 30 95 2c d3 c0 3b 71 f5 c4 0f c7 a8 93 16 68 be 5d e2 7f cb c0 ae ca fb a2 26 7d 51 45 5f d4 a8 2f ea dd 79 79 89 f5 38 d5 82 88 a1 7b 11 df 3b e0 00 eb 55 c3 bd 8a 10 1b b3 f8 b4 f5 e5 ad ed 04 e5 a9 e3 04 cc eb c1 65 51 96 e2 ba c2 bc 18 76 9f 4c cc 4b b0 3c 1e 85 99 ee c2 74 bb 17 2e f7 9e ed 2b a0 64 93 d0 08 ca 63 cb 31 2e 92 5b ae 1d 0f 85 3b 65 2c ef 8b 52 94 4f 1d 6f 51 9e 9a cc 9a c0 12 3e 66 d6 d7 c2 fa a3 a8 90 d6 72 7d e0 d6 6a dd 8d 92 5b 84 bb 0d 3a 23 ae 75 a0 1d 59 Data Ascii: =iw8?}Xq':;vw6A$1HUxI-t=UBP>:1kw?l0[Np#p<MQ#e316cS];Pz`9PY76)p@B&>N(+mm'7<E2)cIiYKP:So~Imyt,AL+C'~UjzUzwe9lJ0_AE%fo(GPlEOAcN=0;J,\RMI0LX330Uj^J(Z@IhL)2bNtyL}V%j9c@.~%+d(1k617~~593{h[zQcMSj:d\|@ T~-)J]bwftC'kVF/yGVS2skQ~i-G0}^CJm0,;qh]&}QE_/yy8{;UeQvLK<t.+dc1.[;e,ROoQ>fr}j[:#uY
Apr 26, 2024 06:11:39.306092024 CEST	693	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/referrals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Apr 26, 2024 06:11:39.532320976 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:39 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn134.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:39.801949978 CEST	1009	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/referrals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:40.063456059 CEST	628	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:39 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu129.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=9 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.768755913 CEST	440	OUT	GET /fonts/wSocial/wsocial.woff?ts=1713474201933 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive Origin: http://www.painrehabilitation.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://cdn2.editmysite.com/css/social-icons.css?buildtime=1644361842 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:49.928411961 CEST	628	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 2636 Server: nginx Content-Type: font/woff Last-Modified: Thu, 18 Apr 2024 20:59:30 GMT ETag: "662189b2-a4c" Expires: Thu, 02 May 2024 21:19:03 GMT Cache-Control: max-age=1209600 X-Host: blu13.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:49 GMT Age: 629506 X-Served-By: cache-sjc10048-SJC, cache-pdk-kfty2130070-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 2 X-Timer: S1714104650.847872,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:49.928549051 CEST	1289	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 0a 4c 00 0a 00 00 00 00 0e 60 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 00 f4 00 00 00 43 00 00 00 56 35 bb 41 f4 63 6d 61 70 00 00 01 38 00 00 00 3b 00 00 01 52 e6 2f Data Ascii: wOFFL`OS/2CV5Acmap8;R/glyftpH\head06].hhea$hmtx4D#locaH$$Bmaxpl &name%4Tpost
Apr 26, 2024 06:10:49.928627968 CEST	1289	IN	Data Raw: 37 29 55 e4 fa c6 d7 37 36 2e a3 ac a5 83 bc da 47 de f2 c4 23 0b a8 74 84 03 c5 68 20 4b 35 64 cb 98 06 a5 b3 00 98 54 4a 1f 3a b6 63 0f 99 f2 bb b2 45 1b 35 0e 79 40 d9 81 70 fd 00 5e b1 5e 7c 65 a2 07 d0 9b 80 f9 61 ab 83 4c b7 7f ae b5 a6 3d Data Ascii: 7)U76.G#th K5dTJ:cE5y@p^^\|eaL=`-/V!`waYSeB2V9O35=dgD?;][;=jv:wX;a^P4('yXc87`JMT$s}R0e%
Apr 26, 2024 06:10:49.928637981 CEST	58	IN	Data Raw: 23 64 ce 06 1b f2 89 b5 8d 7a ab 66 47 e3 1a 9b 9d fc 77 c7 c4 f2 45 1b 06 79 e8 25 04 35 45 32 c6 38 6c cf 6a 70 38 73 f7 f3 48 76 e1 8a f3 66 5c 14 e2 03 34 19 32 f3 00 00 Data Ascii: #dzfGwEy%5E28ljp8sHvf\42
Apr 26, 2024 06:10:51.660372972 CEST	403	OUT	GET /fonts/SQ_Market/sqmarket-medium.woff2 HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive Origin: http://www.painrehabilitation.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:51.820029020 CEST	635	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 30768 Server: nginx Content-Type: font/woff2 Last-Modified: Fri, 19 Apr 2024 17:44:32 GMT ETag: "6622ad80-7830" Expires: Mon, 06 May 2024 08:15:43 GMT Cache-Control: max-age=1209600 X-Host: grn81.sf2p.intern.weebly.net Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:51 GMT Age: 330908 X-Served-By: cache-sjc1000119-SJC, cache-pdk-kfty2130070-PDK X-Cache: HIT, HIT X-Cache-Hits: 6, 1717 X-Timer: S1714104652.739496,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:10:51.820081949 CEST	1289	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 78 30 00 13 00 00 00 01 49 04 00 00 77 bf 00 01 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b 81 90 4c 1c 93 4a 06 60 00 88 36 08 1c 09 82 73 11 08 0a 83 a0 70 82 ec 7d Data Ascii: wOF2x0Iw?FFTMZLJ`6sp}6$`r Bu?webf[)qEt0TmxGco,5pWGg4X(_UpGH#2Q+U>DFl9F}FN-QaS.?iriaNiN$f;@Jt
Apr 26, 2024 06:10:51.820154905 CEST	1289	IN	Data Raw: 1e 37 7c dd 27 8a 7b 0f c7 9c aa be 1e aa 62 ad 58 63 8c e7 0b a4 ce 30 07 ea d0 cd 89 c9 d3 17 0c b5 18 d3 3a 73 b5 90 de 8d 51 22 28 65 87 a2 ff 06 63 cb 9d 7e b6 cf 36 e3 5f 0c 94 52 41 d7 71 bf 77 52 8f 9e f8 f7 be ac b4 27 d5 88 01 c1 06 98 Data Ascii: 7\|'{bXc0:sQ"(ec~6_RAqwR'A`V3s>!v}l-#D+-U7,89O)zkCM7}~k\|7A7"M1p_a7r~z ig8}]99zt9;ZK-C[A
Apr 26, 2024 06:10:51.820193052 CEST	1289	IN	Data Raw: 2e 94 b2 5b 61 24 01 3b 42 3c 31 ac 45 c4 99 0e 6f 9d be 53 5d 98 33 d4 b4 7e 44 4a ce b7 3a 68 cb fe 5b 08 5a 0b 56 30 1f 39 41 7f 82 f1 71 3e 11 90 0c c5 ee df e3 78 d0 16 1c 0b d6 c8 11 fa 29 76 80 3b 12 4a 52 df b2 e6 53 f2 f0 c4 bb 76 43 70 Data Ascii: .[a$;B<1EoS]3~DJ:h[ZV09Aq>x)v;JRSvCpiR[>Fj~$e'k=?HC(0=ba1"-:0/VZS[$&rW7eP4}a5P xb@7lPWh`0pI;P^
Apr 26, 2024 06:10:51.820255995 CEST	1289	IN	Data Raw: 49 ce 24 97 60 16 b7 70 3f ce 7b c8 78 51 fc 74 22 8b 0e 76 d3 9e 7d 07 0e e7 47 2f ce 5d 46 44 c5 c4 25 a4 e6 79 c9 d8 0a 47 20 51 68 4c 62 c7 1c 9e 40 6c a7 a5 84 1c 0a 2a 8d 91 cc ca 62 57 e7 da 47 41 6b d5 1e 74 46 57 6f de 5f 0e 50 44 ac 47 Data Ascii: I$`p?{xQt"v}G/]FD%yG QhLb@l*bWGAktFWo_PDG>p5nimNi,[o#S2'!Lf$U@HDL"^6uUA5Uuk7hY^;&;z Elei.Sn_)sbI#i8Dl:fF,my)-.
Apr 26, 2024 06:10:51.820297003 CEST	1289	IN	Data Raw: 39 aa 82 52 5f e5 6a d2 51 35 66 fc 1d 17 b2 96 b2 0e bd 73 bc ad 4a e2 56 24 48 92 33 c4 59 d3 80 f0 5a 0f 5d d1 0a 8f 35 3a 5a 0f 5e d1 bb 13 7d 9f 31 08 0f 5f 31 0c 8f 0f 10 b4 8c 21 93 61 fa 88 b9 85 3f f1 82 d2 99 af 0d d8 9b f0 a1 68 b7 bf Data Ascii: 9R_jQ5fsJV$H3YZ]5:Z^}1_1!a?hD^jb'lyS=EL:NkG'Yd+VCK!C> {g{L1{I,h5}f7NG=E0A`H3,V8A:X
Apr 26, 2024 06:10:51.820359945 CEST	1289	IN	Data Raw: 2e 35 45 e6 8c 3d b4 af ba 5c f3 29 81 23 97 38 22 39 0d 2f dc 21 c0 37 4e 42 18 62 5b 85 71 11 5d c8 3b 32 e7 96 37 55 4c e5 60 af 0a 67 17 ca 2e 8c bd 08 f0 cb e9 f5 d9 6f bf ce 40 64 80 57 1e 21 79 0e 42 21 43 a1 42 65 ee 98 01 c5 09 8a 27 25 Data Ascii: .5E=\)#8"9/!7NBb[q];27UL`g.o@dW!yB!CBe'%>\|o?m2(g#/[~.Cu9Qos]\|:fpw3)8$*]ryW4C0UqKa!$@@?L
Apr 26, 2024 06:10:51.826265097 CEST	1289	IN	Data Raw: 84 4e cf 3c 72 5e 8c 5d 24 ae 8a db 1b f0 2a a9 73 63 a6 91 ed 6f 65 6f b6 48 12 7d 97 64 a5 e2 7c 63 6b f7 60 ad f1 1f d1 0a f5 fd ad 02 fc 1f ae 74 46 4f d9 09 50 cd 4f 00 ba 01 ef 4a e7 c5 44 f3 af 74 98 c7 66 d6 c2 b8 da d4 d2 64 ef 7f d2 84 Data Ascii: N<r^]$*scoeoH}d\|ck`tFOPOJDtfdsBFo):-r)Eje2LA(,OFl5U2K:wZB?ENuQy_0k`MB$]A!W@u,idE$WXb(.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.788127899 CEST	494	OUT	GET /uploads/1/0/3/6/10363185/background-images/1797786785.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:50.016910076 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/png Content-Length: 418549 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "64ccce51a2cdfdf456b9e27fdebe61a9" x-amz-request-id: tx000006e850dfd08a03bbd-00662b2845-e9549c7-sfo1 X-Storage-Bucket: zd0ac X-Storage-Object: d0ac970277c573254a3d9e81e73e0c1385868ba193a29bce56047cd737269e81 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 15 08 06 00 00 00 73 30 cf 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 39 2f 31 31 1d d4 f1 77 00 00 ff 49 49 44 41 54 78 5e ec fd 09 d0 ad 5b 7a df 85 3d 7b 1e bf f9 cc 77 ea db b7 5b dd ad 79 b6 65 cb 58 01 13 8c 2b e0 90 0a 81 10 13 c8 48 51 09 a4 0a 9c 0a 29 12 20 0c 81 a2 80 82 14 43 c5 65 4c 61 a0 70 28 63 ec b2 00 63 84 65 cb b6 90 64 59 43 ab a7 7b fb 4e e7 de 33 9f f3 cd 7b 9e be fc 7e cf da fb 9c 73 5b 92 c1 4c ee 96 f6 fa be 77 bf eb 5d f3 7a d6 b3 d6 7a fe 6b ac 5c a1 62 ab b6 6a ab b6 6a ab b6 6a ab fe 1a 2a bb e2 ca fa fd ab 95 3d 75 05 eb 4f f6 d8 2f 7f e8 f7 85 ba ba 5a 61 bb b6 5f 7b da fc 6e ba fd f2 5e bb 41 f9 ed df 0a bf fa 49 ff eb f7 c6 ed c6 4d f9 7f d9 dc 5f e2 d4 5e ff 19 9e 69 28 6a e3 2e ff 37 7e d2 a6 7c ab af 9a 3f fe 2a 2f e5 e5 e5 3c 6b aa b6 52 a9 a6 4e 77 15 1c f8 9d 6f 5d ac df c5 5c dd da 8e c7 10 8a 5e ff f9 f5 dc 3c c3 4b f3 8d 59 b1 2f ff c5 4d 31 5e db 67 42 fc de a8 cd 47 49 ec 8b 38 36 26 45 bd ec 25 e9 90 61 ad 5d ac e3 fd f5 d5 3a d2 8d 3f 4d d2 ef da 7f aa 4f c4 b0 f1 f1 dc 49 79 59 46 1b 3f 2f b9 41 6d e8 ff c2 be 98 f9 9d 6e 9e a7 57 57 e8 c9 67 ad 5a 7b 9e df e5 d5 32 16 8b 69 2c 96 33 ca b3 5a fc ae 96 51 c5 8d 7c 95 61 67 78 1b 1e 59 87 6d b0 f9 5d cc 8d a3 a4 a1 a4 43 bf 7e ae 08 6b e3 df b0 56 c4 57 fc 2d 33 0d cb e5 82 77 49 e3 12 b7 2a df 85 17 ab f8 6f c2 a5 2d dc e9 7f 8e f9 58 df 51 ab ed 46 bd d6 c9 b0 96 8b 61 cc e6 27 31 9f cf 63 b6 ac c7 9c 67 b1 24 2e 93 46 d8 cd 46 2b 9a f5 3a 79 82 b7 8c 80 10 f1 85 fd 28 e6 8b 73 fc 4d 62 3a 6f c4 64 d6 8a e9 02 1a 10 77 ad ba 88 46 7d 15 bd 6e 3f 1a d5 3e 7e 1b 51 a9 d5 Data Ascii: PNGIHDRs0sBIT\|dsRGBgAMAapHYs+tEXtSoftwareAdobe Fireworks CS5.1HtEXtCreation Time11/29/11wIIDATx^[z={w[yeX+HQ) CeLap(ccedYC{N3{~s[Lw]zzk\bjjj=uO/Za_{n^AIM_^i(j.7~\|?/<kRNwo]\^<KY/M1^gBGI86&E%a]:?MOIyYF?/AmnWWgZ{2i,3ZQ\|agxYm]C~kVW-3wI*o-XQFa'1cg$.FF+:y(sMb:odwF}n?>~Q
Apr 26, 2024 06:10:50.016944885 CEST	79	IN	Data Raw: e2 6a 39 85 3e c4 37 7d 1c a3 c9 45 0c a7 ad 18 ce 9a 84 47 d8 54 88 3a 71 b4 9b c6 d7 c4 0f dc 2c 9d 2b e4 67 65 da 27 31 9b 9d c4 68 3a 21 8d 1d b2 41 9a 2a d0 7e f6 38 26 a3 c7 71 3a ac 47 77 f7 db e3 fa de ed d8 eb d7 a3 56 c1 ed f8 Data Ascii: j9>7}EGT:q,+ge'1h:!A*~8&q:GwV
Apr 26, 2024 06:10:50.016957045 CEST	1289	IN	Data Raw: dd 98 cf 4e 63 be 9a c5 62 b5 90 b0 c4 64 b6 fc 95 66 3e 8b a4 43 54 56 81 af 00 28 64 dc 33 68 bb 80 ce ab c5 8c 72 86 fa fa a9 57 62 40 5e 1e 92 ce 27 92 7d 34 8c 3b 8b 79 dc aa 34 a2 85 59 a3 b9 1f af dc fc d1 d8 ed dc 20 fe 5a 3c be b8 1b 8f Data Ascii: Ncbdf>CTV(d3hrWb@^'}4;y4Y Z<4a\A-n{l~1]yvAO/J?WO-,Kk<g]> S.ah7yr5+&/\|[f6E?\|Fr{e
Apr 26, 2024 06:10:50.016967058 CEST	79	IN	Data Raw: ef 46 ab dd 8c 46 bb 1e ed 46 03 30 0e 08 6f d5 c1 a9 f8 e7 bb 09 b0 4d 9e 80 67 1a 75 d3 2d 7f 11 0f 69 8b 04 ca b6 23 d6 2f e9 5c 54 95 3f 08 6d ea 92 28 0e 54 40 72 de 70 10 e6 e6 67 6e 7e 66 d6 d9 25 7c c0 f7 74 41 9a 26 31 9f 2d e0 Data Ascii: FFF0oMgu-i#/\T?m(T@rpgn~f%\|tA&1-
Apr 26, 2024 06:10:50.017189980 CEST	1289	IN	Data Raw: 8d 19 75 63 1a d3 c5 98 3a 81 9b f9 8a 3a b9 c0 cc 3a 4b d0 44 bd 34 3e d2 e2 fb 8a 3c ad a0 01 89 4a bb 15 b4 58 51 77 57 8e 55 74 fb 51 3d d8 8f ca cd 1b 51 bb 79 3b 2a 37 ee 44 ed da 4d cc ae 47 ec c2 67 3b 3b 71 c5 53 ed 01 d2 a9 73 55 c0 7e Data Ascii: uc:::KD4><JXQwWUtQ=Qy;7DMGg;;qSsU~}:+M-w? &8@O^-0JJ$6VkRE?^r<sMS_b $)vE_@Uy\|#[`#rfHAr2-?~Qo~9}6
Apr 26, 2024 06:10:50.017244101 CEST	79	IN	Data Raw: 09 66 04 2c ce 36 12 72 3e 6b 9a 67 b9 0a ea 4d 8f 83 35 1b 37 98 af cd 5e 7c 17 b0 2b 00 31 4c 67 01 37 40 3d c3 c2 2e cd 01 29 69 ae db c5 1c 77 9a eb 6f 81 3c 5f 05 dc 01 2c 05 45 57 73 c0 c0 b4 84 bd 06 e8 9a 3b 13 37 9d 23 f4 f3 96 Data Ascii: f,6r>kgM57^\|+1Lg7@=.)iwo<_,EWs;7#
Apr 26, 2024 06:10:50.017344952 CEST	1289	IN	Data Raw: 4f 05 49 f5 3a 42 76 d2 9e 70 78 e6 00 9c d9 12 30 30 05 f4 92 df 4d be f4 ef 72 f8 c5 ca 19 e7 0a 40 19 7a 10 4e ad b2 20 ae ab 04 f9 15 c1 14 e8 40 00 99 03 01 3c 17 c3 69 3c 3d 9b c5 e3 93 15 20 36 62 bf 5b 8b 7e db 41 01 d2 ce df 7c 31 89 d1 Data Ascii: OI:Bvpx00Mr@zN @<i<= 6b[~A\|1t6^9Iy9!!iqyeEK-`(3bniOW=Kvsp.f&Hn_~77`~ q3N3qm;{}_&f4`:
Apr 26, 2024 06:10:50.017379999 CEST	79	IN	Data Raw: 27 4f e9 8c b7 44 29 20 bb d4 6f c3 73 76 bb f8 c5 9e 6f 74 b8 93 c6 bc 93 d4 69 42 98 c2 54 3f e9 07 d2 de 41 12 ca 40 be e6 33 07 ab a0 7d 2d cb 3b 6d f9 2b f1 e5 40 03 8e b2 fe d8 86 c2 c3 f8 da b8 20 cc 02 84 4d 90 fb d0 dd 12 dd 01 Data Ascii: 'OD) osvotiBT?A@3}-;m+@ M
Apr 26, 2024 06:10:50.017479897 CEST	1289	IN	Data Raw: 48 f7 76 5a b1 d3 6f c7 3e c0 7c 67 a7 03 48 6f 45 cf 59 70 c0 65 cb 3d e4 09 b0 5d da 4e 19 00 68 9b 3e ad 6e ec 74 f7 a2 8b 9c e5 32 f8 65 6e 9b b8 88 03 50 6f 82 7a 67 d0 5b 00 7a 22 69 37 ea f0 03 94 25 ef 3e 4d 92 e0 62 fc 2c 1f fe 12 9c 93 Data Ascii: HvZo>\|gHoEYpe=]Nh>nt2enPozg[z"i7%>Mb,VyP7f4g\|i\|B}_lhG?OEY6W:yhqX/r{DQ~+UG@lpI;T&Lty[
Apr 26, 2024 06:10:50.017493010 CEST	79	IN	Data Raw: 92 bb 34 e7 7f d3 f1 6f 54 02 22 84 80 4d 98 ba 4b a1 40 3d 66 cf f5 1b f3 0c c6 1f 7f 8b bf e2 7f ad d7 54 3d 42 54 9a f9 87 5e 50 a0 80 9f 33 e4 08 49 ce 90 3b 23 9e 40 42 a1 c9 19 73 04 4c 4f 2a ce 99 74 04 2d 85 7f 67 b8 3c 04 cb 24 Data Ascii: 4oT"MK@=fT=BT^P3I;#@BsLO*t-g<$
Apr 26, 2024 06:10:50.017565966 CEST	1289	IN	Data Raw: 7b 82 6e ab 85 b0 8b d9 15 42 9b 82 66 ae 6b e4 41 ce 41 58 c9 89 85 f4 a3 a0 a3 3b f7 04 2b fc fa 2e b3 65 6b e1 07 21 48 92 e5 92 c1 b5 3e 97 15 92 5e ed d3 c0 5f f4 c5 4d 3a 48 b3 fc 5e eb 5f 84 27 5d 7d a4 ad ef b4 f5 27 ed d6 da a2 5f 7f 17 Data Ascii: {nBfkAAX;+.ek!H>^_M:H^_']}'_=oK~_iWHo"hvJaH:_QaWp+R]j{tWWYd`uT{4@voYc"xy.Agwsf_*9cOhrG<\|_M
Apr 26, 2024 06:10:50.220942974 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/png Content-Length: 418549 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "64ccce51a2cdfdf456b9e27fdebe61a9" x-amz-request-id: tx000006e850dfd08a03bbd-00662b2845-e9549c7-sfo1 X-Storage-Bucket: zd0ac X-Storage-Object: d0ac970277c573254a3d9e81e73e0c1385868ba193a29bce56047cd737269e81 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 15 08 06 00 00 00 73 30 cf 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 39 2f 31 31 1d d4 f1 77 00 00 ff 49 49 44 41 54 78 5e ec fd 09 d0 ad 5b 7a df 85 3d 7b 1e bf f9 cc 77 ea db b7 5b dd ad 79 b6 65 cb 58 01 13 8c 2b e0 90 0a 81 10 13 c8 48 51 09 a4 0a 9c 0a 29 12 20 0c 81 a2 80 82 14 43 c5 65 4c 61 a0 70 28 63 ec b2 00 63 84 65 cb b6 90 64 59 43 ab a7 7b fb 4e e7 de 33 9f f3 cd 7b 9e be fc 7e cf da fb 9c 73 5b 92 c1 4c ee 96 f6 fa be 77 bf eb 5d f3 7a d6 b3 d6 7a fe 6b ac 5c a1 62 ab b6 6a ab b6 6a ab b6 6a ab fe 1a 2a bb e2 ca fa fd ab 95 3d 75 05 eb 4f f6 d8 2f 7f e8 f7 85 ba ba 5a 61 bb b6 5f 7b da fc 6e ba fd f2 5e bb 41 f9 ed df 0a bf fa 49 ff eb f7 c6 ed c6 4d f9 7f d9 dc 5f e2 d4 5e ff 19 9e 69 28 6a e3 2e ff 37 7e d2 a6 7c ab af 9a 3f fe 2a 2f e5 e5 e5 3c 6b aa b6 52 a9 a6 4e 77 15 1c f8 9d 6f 5d ac df c5 5c dd da 8e c7 10 8a 5e ff f9 f5 dc 3c c3 4b f3 8d 59 b1 2f ff c5 4d 31 5e db 67 42 fc de a8 cd 47 49 ec 8b 38 36 26 45 bd ec 25 e9 90 61 ad 5d ac e3 fd f5 d5 3a d2 8d 3f 4d d2 ef da 7f aa 4f c4 b0 f1 f1 dc 49 79 59 46 1b 3f 2f b9 41 6d e8 ff c2 be 98 f9 9d 6e 9e a7 57 57 e8 c9 67 ad 5a 7b 9e df e5 d5 32 16 8b 69 2c 96 33 ca b3 5a fc ae 96 51 c5 8d 7c 95 61 67 78 1b 1e 59 87 6d b0 f9 5d cc 8d a3 a4 a1 a4 43 bf 7e ae 08 6b e3 df b0 56 c4 57 fc 2d 33 0d cb e5 82 77 49 e3 12 b7 2a df 85 17 ab f8 6f c2 a5 2d dc e9 7f 8e f9 58 df 51 ab ed 46 bd d6 c9 b0 96 8b 61 cc e6 27 31 9f cf 63 b6 ac c7 9c 67 b1 24 2e 93 46 d8 cd 46 2b 9a f5 3a 79 82 b7 8c 80 10 f1 85 fd 28 e6 8b 73 fc 4d 62 3a 6f c4 64 d6 8a e9 02 1a 10 77 ad ba 88 46 7d 15 bd 6e 3f 1a d5 3e 7e 1b 51 a9 d5 Data Ascii: PNGIHDRs0sBIT\|dsRGBgAMAapHYs+tEXtSoftwareAdobe Fireworks CS5.1HtEXtCreation Time11/29/11wIIDATx^[z={w[yeX+HQ) CeLap(ccedYC{N3{~s[Lw]zzk\bjjj=uO/Za_{n^AIM_^i(j.7~\|?/<kRNwo]\^<KY/M1^gBGI86&E%a]:?MOIyYF?/AmnWWgZ{2i,3ZQ\|agxYm]C~kVW-3wI*o-XQFa'1cg$.FF+:y(sMb:odwF}n?>~Q
Apr 26, 2024 06:10:55.040703058 CEST	717	OUT	GET /favicon.ico HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:10:55.269520044 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:55 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: keep-alive Last-Modified: Tue, 05 Dec 2023 01:20:44 GMT x-rgw-object-type: Normal ETag: "4d27526198ac873ccec96935198e0fb9" x-amz-request-id: tx00000b6eca4e978cdf0d1-0065d9ed67-e9549c7-sfo1 X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 3b 33 00 43 3b 34 04 44 3b 33 12 44 3c 33 18 44 3c 33 13 44 3c 36 07 41 32 22 00 50 63 82 00 00 00 00 00 00 00 00 00 4d 3e 35 00 00 0c 17 00 45 3b 34 08 44 3b 33 15 44 3b 33 19 44 3c 33 13 46 3c 35 05 45 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 df Data Ascii: ( @ D;3C;4D;3D<3D<3D<6A2"PcM>5E;4D;3D;3D<3F<5E<4F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C;2C;2C;2C;2C;2C;2
Apr 26, 2024 06:10:59.426265001 CEST	747	OUT	GET / HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:10:59.677788973 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:59 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:10:59 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"acb3af88f9abe902c644d8275113b06b-gzip" Content-Encoding: gzip X-Host: grn80.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 8007 Keep-Alive: timeout=10, max=8 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d fd 77 db 38 8e 3f 27 ef dd ff c0 d1 ec 56 ce d4 df 1f 71 62 c7 e9 a6 49 da c9 be b6 c9 26 e9 f4 e6 b5 3d 3f 5a a2 6d 35 b2 a4 8a 52 52 6f ea ff fd 00 92 fa b2 a5 c4 99 74 f6 f6 ee 32 bb b5 2d 12 04 41 10 00 01 8a 44 f6 7e 3a 3a 3d bc fc fd ec 98 4c 83 99 bd bf b9 87 5f c4 a6 ce 64 a0 31 47 db df dc d8 9b 32 6a c2 f7 c6 5e 60 05 36 db 7f e9 5b 7c 44 1d 46 ce a8 e5 90 73 36 a5 23 cb b6 02 1a 58 ae 43 2e 98 7f 6d 19 8c 54 c8 3a 60 7b 35 89 72 6f c6 02 4a 3c df f5 98 1f cc 07 9a 3b e9 71 2b 60 43 87 ce 98 46 0c d7 09 98 13 0c b4 75 50 6a a4 06 83 58 c5 27 3a fa 41 b8 4c c6 0d df f2 10 f4 81 18 cb e4 70 ea bb 8e 65 48 a0 b7 d4 a1 13 36 83 e6 65 f2 36 b4 03 cb b4 b8 61 79 b6 e5 50 7f be 0c 42 ce 7c 77 e2 d3 59 11 55 d6 0c 00 53 f4 4c 83 c0 eb d5 6a 37 37 37 55 0f 30 f9 19 82 aa 86 3b ab d2 b0 16 7a b6 4b 4d 5e 6b d4 ea b5 56 6d bb d6 a8 b7 b6 5b 8d 9d 4e 6d a7 51 df dd 69 b5 aa 5f bc c9 8b 66 a7 fe af e9 74 e4 f9 bc 62 bb 13 17 bb 2d ea 32 f4 ed 87 76 28 50 29 5c 28 53 03 ed df 66 0a 25 39 57 6c 7e e3 fa 26 4f d1 82 a3 29 13 43 f5 25 9f 46 11 7d f8 88 5c 41 64 65 f9 34 4b 11 22 b8 b0 5a 12 8f 45 35 11 85 65 02 3d 5f 19 ee 35 f3 b3 68 53 44 22 93 2b ec 6b 68 5d 0f b4 43 49 60 e5 72 ee a5 27 3e 60 df 82 1a da 8e 3e d0 4c 7d ce 82 41 18 8c 2b 3b da d2 48 af 2d 76 e3 b9 7e 90 6a 7a 63 99 c1 74 60 32 e4 6e 45 3c 94 89 e5 58 81 45 ed 0a 37 a8 cd 06 8d 6a bd 3c 83 a2 19 94 84 16 18 25 b0 46 68 90 80 cb 57 c4 32 01 05 9a 8b ca 88 72 56 e1 c1 1c 15 dd 67 f6 40 13 bf f9 94 31 e8 2e 00 7a 15 99 06 07 46 4f 7d 36 1e 68 b5 9a 61 3a cd 2a 33 ad 60 36 47 24 28 32 08 50 c3 07 5e 85 5f 2f 46 a1 65 9b 97 16 50 df d8 6e b7 5b db 8d 9d 76 53 32 47 f4 ff e8 9e 5c db ac 8d a9 63 cc 47 ee 37 d1 e1 9f d3 0d 77 0d e4 a8 05 7c 4f 8d 2b 58 1e d7 0c 9a 52 e8 c9 f0 19 73 ca 20 0c 5f 98 21 d5 e4 c1 a4 8c 2d 80 a8 cd 40 a8 86 02 3a 19 5c b7 db d8 de 85 76 68 94 a3 d9 0b a6 20 ab 15 d1 3e ee 49 20 d2 6b b5 31 c8 0a af 4e 5c 77 62 33 ea 59 3c 1a d4 8b 31 9d 59 f6 7c 70 08 c2 ed f4 da f5 7a b9 0b ff e0 1b 04 dd b6 0c 7c 92 bf 9e f1 70 84 32 69 83 fc 3b 65 f1 59 01 72 75 31 16 3d 19 8b 2e c7 a2 47 63 d1 1f 4e cb 5b ac 67 be 4f 83 88 a0 47 75 be b9 27 00 96 ab f6 37 ab 92 6d cc 16 2a ce d5 a3 e3 06 95 b1 eb 06 cc ef c1 cf 92 2a c5 25 9c f9 31 ec 16 31 ad 6b b0 97 3e 05 4d f7 40 dd 1e 85 cb 7b 64 fb 2a 08 99 19 1a 41 65 64 bb c6 55 f2 28 a4 e3 47 e1 4e 19 fc c7 Data Ascii: =w8?'VqbI&=?Zm5RRot2-AD~::=L_d1G2j^`6[\|DFs6#XC.mT:`{5roJ<;q+`CFuPjX':ALpeH6e6ayPB\|wYUSLj777U0;zKM^kVm[NmQi_ftb-2v(P)\(Sf%9Wl~&O)C%F}\Ade4K"ZE5e=_5hSD"+kh]CI`r'>`>L}A+;H-v~jzct`2nE<XE7j<%FhW2rVg@1.zFO}6ha:3`6G$(2P^_/FePn[vS2G\cG7w\|O+XRs _!-@:\vh >I k1N\wb3Y<1Y\|pz\|p2i;eYru1=.GcN[gOGu'7m%11k>M@{dAedU(GN
Apr 26, 2024 06:10:59.702816010 CEST	679	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:10:59.930735111 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:59 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn143.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:00.069263935 CEST	750	OUT	GET /uploads/1/0/3/6/10363185/background-images/360879484.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:11:00.300044060 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:00 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx000003fdfa81969ac68af-0066259601-e8f4575-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:00.567904949 CEST	995	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:00.831410885 CEST	629	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:00 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu140.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=11 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:03.247900963 CEST	760	OUT	GET /about-us.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Apr 26, 2024 06:11:03.497055054 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:03 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:03 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"912ba83fe11cff1f94254e0922c24c93-gzip" Content-Encoding: gzip X-Host: blu39.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7097 Keep-Alive: timeout=10, max=59 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 38 92 9f ed aa fb 0f 18 cd 5e 28 4f f4 96 65 d9 7a 78 d6 71 3c b3 d9 9a 24 de d8 d9 b9 ad 38 a7 82 48 48 42 4c 91 0c 41 5a d1 3a fa ef d7 0d 80 2f 89 b4 e5 38 73 b7 b7 e5 d9 1d 99 04 1a 8d 46 bf d0 0d 02 98 c1 0f 2f df 9e 5e fe e3 fc 8c cc 82 b9 7d bc 3b c0 3f c4 a6 ce 74 58 62 4e e9 78 77 67 30 63 d4 82 bf 3b 83 80 07 36 3b 3e 19 bb 61 40 de 0b 52 25 2f 7c 2e c6 d4 61 e4 9c 72 87 bc 63 33 3a e6 36 0f 68 c0 5d 87 5c 30 ff 86 9b 6c 50 57 cd 06 73 16 50 e2 f9 ae c7 fc 60 39 2c b9 d3 9e e0 01 1b 39 74 ce 4a c4 74 9d 80 39 c1 b0 b4 0d ca 12 a9 03 a1 9b f8 64 47 29 5c 11 a5 45 f0 16 13 a6 cf 3d 44 9d a6 e0 fc dd 05 f1 a0 43 78 13 84 fa 8c 50 6b ce 83 80 59 24 74 2c e6 93 60 c6 88 89 e5 ee 84 bc f4 c9 25 f5 43 87 8b 19 25 17 33 ea cf 29 a1 8e 25 61 5e 72 9f 99 81 eb 23 1c be 43 df 53 9f ce 2b d8 e8 82 86 36 f9 95 4d 26 cc a9 91 13 db 26 96 8b a0 aa 3f 3f 3b 6a 6f b6 14 dc e4 d4 11 15 b2 98 b9 64 c1 01 7e 0c 64 09 c1 05 92 35 5e 12 17 3a f0 c9 9c 59 dc a4 76 a5 56 ab 15 8d 99 cf e9 34 cd a3 59 10 78 bd 7a 7d b1 58 d4 3c e0 78 b6 eb 9a e9 ce 6b 34 ac 87 9e ed 52 4b d4 9b f5 46 bd 5d 3f a8 37 1b ed 83 76 f3 b0 53 1f 7b be a8 da ee d4 ad 7d f2 a6 45 5d 86 be fd d0 0e 29 4a ae 1a 8a 1a 6a a3 c4 0b ff 28 d4 d8 be ca 3e 87 fc 66 58 3a 55 48 ab 97 4b 2f 3d a6 80 7d 09 ea d8 b2 4f 4c 10 89 60 c1 30 0c 26 d5 c3 52 4c 1f 2a dd b0 74 c3 d9 c2 73 fd 20 d5 74 c1 ad 60 36 b4 18 aa 59 55 be 54 08 77 78 c0 a9 5d 15 c0 5a 36 6c d6 1a 95 39 14 cd a1 24 e4 60 20 60 19 68 1c 36 77 ae 09 b7 00 05 aa 75 75 4c 05 ab 8a 60 89 0a e9 33 7b 58 92 cf 62 c6 18 74 17 00 bd 9a 4c 53 80 7a ce 7c 36 19 96 ea 75 d3 72 5a 35 90 61 30 5f 22 12 e4 06 02 d4 f1 45 d4 e0 e9 e7 71 c8 6d eb 92 03 f5 cd 83 fd fd f6 41 f3 70 bf a5 f8 2e fb 7f 74 4f ae 6d d5 27 d4 31 97 63 f7 8b ec f0 8f e9 46 b8 26 72 94 03 df 53 e3 0a d6 c7 85 fa 4c a1 27 d3 67 cc a9 80 52 7d 02 83 92 d6 fa 60 52 26 1c 20 ea 73 d0 b8 91 84 4e 06 d7 ed 36 0f 8e a0 1d 3a 8f 48 7a 60 4d 73 56 95 ed e3 9e 24 22 a3 5e 9f 80 ae 88 da d4 75 a7 36 a3 1e 17 d1 a0 7e 9e d0 39 b7 97 c3 53 d0 67 a7 b7 df 68 54 ba f0 2f fc 05 dd b6 b9 89 6f ea e9 99 08 c7 a8 93 36 a8 bc 53 91 bf 55 20 d7 90 63 31 92 b1 18 6a 2c 46 34 16 e3 e1 b4 bc c6 7a e6 fb 34 88 08 7a 54 e7 bb 03 09 b0 5e 75 bc 5b 53 6c 63 36 b0 0d 29 52 af 8e 1b 54 27 ae 1b 30 bf 07 8f 65 5d 8a d3 09 f3 63 d8 3d 62 f1 1b 70 05 3e 05 e7 e8 81 b9 3d Data Ascii: =ks8^(Oezxq<$8HHBLAZ:/8sF/^};?tXbNxwg0c;6;>a@R%/\|.arc3:6h]\0lPWsP`9,9tJt9dG)\E=DCxPkY$t,`%C%3)%a^r#CS+6M&&??;jod~d5^:YvV4Yxz}X<xk4RKF]?7vS{}E])Jj(>fX:UHK/=}OL`0&RL*ts t`6YUTwx]Z6l9$` `h6wuuL`3{XbtLSz\|6urZ5a0_"EqmAp.tOm'1cF&rSL'gR}`R& sN6:Hz`MsV$"^u6~9SghT/o6SU c1j,F4z4zT^u[Slc6)RT'0e]c=bp>=
Apr 26, 2024 06:11:03.722577095 CEST	692	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/about-us.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Apr 26, 2024 06:11:03.949917078 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn38.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 63 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZc
Apr 26, 2024 06:11:04.144814968 CEST	1008	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/about-us.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:04.413662910 CEST	628	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:04 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn29.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=48 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:07.660274982 CEST	1017	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/about-the-program.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:07.922168016 CEST	629	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:07 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn123.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=34 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:09.789500952 CEST	704	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.018136024 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:09 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn152.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:10.153541088 CEST	785	OUT	GET /uploads/1/0/3/6/10363185/published/ben-photo-2-orig.jpg?1613521616 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.381618023 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/jpeg Content-Length: 6356 Connection: keep-alive Last-Modified: Wed, 17 Feb 2021 00:26:56 GMT x-rgw-object-type: Normal ETag: "24aebb4ba7b4c5da41b007727013d4d9" x-amz-request-id: tx00000987eae3267c49a0f-0066289f26-e8f44ee-sfo1 X-Storage-Bucket: z93ce X-Storage-Object: 93ceb9096c4f61b2a34018171d48229f18dd3231ca90c5324bd3e20cb36664ce Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 e0 00 d9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 04 06 03 05 07 08 ff c4 00 42 10 00 01 03 02 04 04 03 05 05 07 03 01 09 00 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 61 07 13 22 14 71 81 91 a1 23 32 42 52 b1 08 15 16 33 62 c1 d1 72 92 e1 43 17 53 55 63 94 a2 c2 f0 f1 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff c4 00 25 11 00 02 02 02 02 03 00 02 02 03 00 00 00 00 00 00 00 01 02 11 03 21 12 31 04 13 41 22 32 23 51 33 42 61 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ee 1b 25 af 54 7b 24 b8 0d c1 6e e9 5b a2 5d 52 b2 00 fb d1 ba 16 29 72 40 10 7a 59 2b f5 40 0d 51 3d 90 20 ee 90 29 04 87 34 24 37 b9 4b 44 ad ae c9 00 80 40 20 74 46 d6 d9 24 00 42 fa 23 6d 10 b2 01 72 dd 04 8d f9 25 aa 01 a9 5d 1b 21 6d 0a 00 5d 00 88 4a c8 01 a5 d2 48 04 82 01 14 08 d1 14 87 b9 00 b4 b2 56 1d 92 b2 59 42 12 65 e4 90 04 a7 58 5a e9 2b 51 51 a0 14 ac 9c 2f aa 44 68 a0 0d 49 38 0e a9 00 80 00 24 13 80 44 04 03 6c 9c 02 29 00 84 83 6b a4 9c 42 40 74 42 2c 60 08 da c9 d6 48 a8 b1 63 2d a2 56 4e 40 a1 23 48 4d 4f 4d 21 00 db 21 6d 13 ac 95 b4 d5 00 db 25 61 c9 38 8d 13 6d a2 00 59 0b 6a 9e 81 1d 50 01 04 eb 5d 2b 20 1a 53 6c 9f d5 35 01 9c 23 c9 11 a8 47 92 b1 00 03 44 00 44 68 11 e6 75 40 04 80 f7 a2 02 21 40 02 21 10 8a 00 5b 6b 24 02 36 55 ee 32 e3 0c 27 84 30 b7 d6 e2 d3 3a da 86 43 10 cd 24 8e e8 07 2f 79 b0 40 6d 71 5c 46 0c 32 86 4a aa 92 ec 8c b3 43 5b ab 9e e2 72 b5 a0 75 24 81 f1 52 60 73 dd 0b 5d 34 62 27 91 ab 33 07 65 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("B!1AQa"q#2BR3brCSUc%!1A"2#Q3Ba?%T{$n[]R)r@zY+@Q= )4$7KD@ tF$B#mr%]!m]JHVYBeXZ+QQ/DhI8$Dl)kB@tB,`Hc-VN@#HMOM!!m%a8mYjP]+ Sl5#GDDhu@!@![k$6U2'0:C$/y@mq\F2JC[ru$R`s]4b'3e
Apr 26, 2024 06:11:10.573537111 CEST	796	OUT	GET /uploads/1/0/3/6/10363185/editor/website-photo-heidi-saunders_1.jpg?1491196700 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.903932095 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/jpeg Content-Length: 14336 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:38 GMT x-rgw-object-type: Normal ETag: "0fcc8232a0300117d3fe831fa3b0b0f6" x-amz-request-id: tx00000425b5d1d6f100c0a-00662b295e-e9549c7-sfo1 X-Storage-Bucket: z9bfb X-Storage-Object: 9bfb4e989156f2ecb90c7c37f3d21079397d29687e2d8bd79f2fe7cf92577849 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 2d 00 bf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 08 05 06 07 01 02 03 04 09 00 ff c4 00 42 10 00 01 03 03 02 03 06 04 05 01 06 05 04 03 01 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 22 41 51 61 32 71 81 91 14 42 a1 b1 c1 23 15 52 62 d1 e1 f0 09 16 33 72 f1 73 82 92 b2 17 25 34 63 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 00 03 05 01 06 ff c4 00 2c 11 00 03 00 02 02 02 01 03 04 01 04 03 00 00 00 00 00 01 02 03 11 12 21 04 31 41 13 22 32 05 51 61 71 23 33 42 a1 d1 24 91 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ea 28 39 aa d5 a9 3b 55 68 c8 5c 0d 78 9a b6 bd 5c d1 0b eb d5 68 35 5c d0 90 ad 7a bd 9a a6 6a 10 ad 7a a9 9a a1 56 01 27 6a 84 2e af 56 ba e7 b4 d9 c1 56 4f a2 41 35 67 e3 da ce 39 b7 fd aa 10 db af 56 ab 77 06 56 f9 63 bc 4f 7c 13 cc 51 9f 16 3d 71 59 f9 c1 e8 41 a8 42 fc d7 ab 1d 54 2b 35 08 5c 4f 95 52 a9 5e a8 43 d5 ea f5 7a a1 0f 57 ab d9 aa 13 83 50 85 6b c4 e2 a9 9a a6 6a 10 a0 e9 57 66 ac 15 70 34 44 2e af 55 01 da ab 91 5c d9 0f 57 aa 99 15 e2 aa e1 0a d5 0a 82 46 49 c0 ab 16 f0 6d 24 a8 e0 01 9a 10 fb 51 76 c7 8f a3 1f 91 a5 f4 b3 e8 55 db 1c b2 6e 5b 2d 31 3f c2 84 f4 53 9f 3d 86 6b 8d e8 ea 4d bd 22 75 e2 97 68 8d 11 c2 26 b9 6f 77 64 aa 7a c6 5a b7 44 1d ec 85 ff 00 ed 1d 07 b9 c0 a1 0f 89 df f1 10 be 4d 75 e8 da 66 d9 12 cb 1b 70 97 a5 1f c4 48 f9 f2 8c 21 3f ad 0b 17 eb fc ab e4 99 32 e5 be f4 89 12 89 5b 8e 3c b2 a7 5c f7 5a bf 8a 65 4f 5a 8b 8b c2 80 1d 30 3f 6a a9 d3 43 13 8d 7c 92 c6 a7 ed 79 c4 5b Data Ascii: JFIFHHCC-"B!1"AQa2qB#Rb3rs%4c,!1A"2Qaq#3B$?(9;Uh\x\h5\zjzV'j.VVOA5g9VwVcO\|Q=qYABT+5\OR^CzWPkjWfp4D.U\WFIm$QvUn[-1?S=kM"uh&owdzZDMufpH!?2[<\ZeOZ0?jC\|y[
Apr 26, 2024 06:11:25.807936907 CEST	658	OUT	GET /files/theme/mobile.js HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.038356066 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 23 Jul 2019 14:31:29 GMT x-rgw-object-type: Normal ETag: W/"07e9e6c62f36b3d745591589ed2c0103" x-amz-request-id: tx00000bc91ce6b1ec97c30-0065134e1d-db1a099-sfo1 X-Storage-Bucket: ze35c X-Storage-Object: e35cdae965132932644d580706fba96e1b54e9affbe3abab406e54e95d17a0cd Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 31 32 35 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b5 1b 6b 73 db c6 f1 33 f9 2b ce 8a 53 80 09 49 51 f5 34 d3 91 6d a5 8a e4 34 9e da b5 6b a9 e3 b6 99 8c 07 04 8e 22 6c 10 c7 02 a0 68 35 d6 7f ef 3e ee 09 80 34 9d 4e 95 89 25 e0 f6 f6 6e f7 f6 bd 87 b7 52 ce 8b 3b f1 54 bc e5 3f 3e 7d 12 bf de 3f 1e 0e f9 71 ba 52 f3 bc 90 ef ca e4 36 bf 49 9a 5c 95 00 19 2f 36 65 8a 7f c7 0f 47 e2 d7 e1 70 70 9b 54 e2 ea c5 f3 cb 67 ef de 3c ff f3 4f d7 00 72 e4 3d 1e 8d 87 83 01 3f 5f be 7a fb 57 37 8a 4f de e0 d5 f5 f9 f5 f3 0b 37 cc cf 04 f0 fc d5 d5 bb f3 cb cb 37 cf ae ae de fd 70 fe e6 dd 4f cf f4 3a df cd 1e eb f5 f3 fa d5 5a e2 ee 16 49 51 4b 9c 94 d7 2f d5 6d 5e de f8 ef ea cd 7a ad aa a6 be 56 9b 74 e9 0f c0 dc 0c 60 df c8 3a ff 8f bc 4c 9a 04 06 cb 4d 51 30 a2 fc d5 15 d2 2d 34 1b 54 35 dd d4 b2 3a bf 91 65 33 5d 25 4d ba 8c 8f e3 fc 75 92 7d ca 5f 2f 55 29 e1 97 ca 46 c7 f9 48 7c 2f 9a 6a 23 c5 29 2f 24 46 fe 1e 1e 5d 22 ce e8 ad 9c ff 25 6f 2e ae ae 5e 26 4d 95 7f 8c 44 5e 8a 6d 5e 66 6a 2b 7e f7 3b 11 ad 4e 4e e8 55 29 b7 a2 05 1a 8f 46 7b 69 5a c9 72 f3 6a b1 a8 65 f3 4f 78 3d c3 57 40 c0 55 73 57 48 78 f6 99 8c 43 0f 11 fc 6d 95 ac d7 b2 1a 0b 7a fa 61 d3 34 aa d4 0f f0 6b ae b2 bb b1 70 fb 07 de 0f 05 fc 1c 7f f3 0d fd fe 46 9c 67 99 48 44 5a d7 40 77 52 d6 39 4a 09 0f 69 80 3f ad 93 2a 59 89 f7 ff de c8 ea 4e 3c 54 42 cd df cb b4 11 8d 12 49 99 03 2f 65 08 58 03 a1 70 84 eb 4a c1 b6 9a bb 0e f2 64 0e c4 98 d1 70 6a b9 59 cd 65 25 ea b5 94 99 68 96 52 ac 6a fd a0 16 7a 31 bb 3b 33 c7 48 b6 48 e7 22 4d 8a 62 9e a4 1f dc cb 64 d1 00 42 3b 55 a4 6a b5 2e 64 23 6b 83 a4 92 cd a6 2a c5 a6 cc e4 22 2f 65 c6 ef 8f 87 03 c1 42 9a 64 d9 b5 dd 3a 1e 95 55 24 35 b6 54 8c 79 97 63 d8 03 aa 17 c8 df 42 c4 0f e8 1d 3f 0f 98 8a a7 e2 0f 33 10 ff c1 e0 7e 88 c7 a7 a6 c0 99 98 c6 b7 72 fe 21 6f dc 4a 97 9b 8a 37 7c aa 19 f0 2d c8 55 1d 8d fb 60 5f 1b 4e 9f ba 0d f5 c1 5d e7 2b Data Ascii: 125fks3+SIQ4m4k"lh5>4N%nR;T?>}?qR6I\/6eGppTg<Or=?_zW7O77pO:ZIQK/m^zVt`:LMQ0-4T5:e3]%Mu}_/U)FH\|/j#)/$F]"%o.^&MD^m^fj+~;NNU)F{iZrjeOx=W@UsWHxCmza4kpFgHDZ@wR9Ji?YN<TBI/eXpJdpjYe%hRjz1;3HH"MbdB;Uj.d#k"/eBd:U$5TycB?3~r!oJ7\|-U`_N]+
Apr 26, 2024 06:11:26.045629978 CEST	747	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-two-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.349153042 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 42042 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:52 GMT x-rgw-object-type: Normal ETag: "49d6a41f7314850266535c58724544ce" x-amz-request-id: tx00000a4c9cf02674692cb-00662b296e-ef1e76d-sfo1 X-Storage-Bucket: z17da X-Storage-Object: 17daf1ef3e01a69dcd30da04ecec05ce333940207026ce06c7c2e1eb6bc9fc4b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.357429981 CEST	775	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-3.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.676259041 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 42893 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:00:35 GMT x-rgw-object-type: Normal ETag: "ab453727e730989896e3cc0a7614891c" x-amz-request-id: tx00000543dbb3270a4511a-00662b296e-e9549c7-sfo1 X-Storage-Bucket: za844 X-Storage-Object: a844310f8b4fcfd980a79a4477f93d6a1b0312041952749888412410442d6f41 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:40.006658077 CEST	765	OUT	GET /files/theme/images/header.jpg?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Apr 26, 2024 06:11:40.236740112 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:40 GMT Content-Type: image/jpeg; charset=binary Content-Length: 707081 Connection: keep-alive Last-Modified: Sun, 01 Aug 2021 09:18:23 GMT x-rgw-object-type: Normal ETag: "07877cbf8a6cb923581dffe69a2b3f3c" x-amz-request-id: tx000001313d371a8ee8886-006564da9a-db1eedd-sfo1 X-Storage-Bucket: zd28d X-Storage-Object: d28d71608819a5d2b6a6fe1727e71115b4ce4413d3420abdf49761d961ee3c14 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 43 38 34 38 32 35 45 30 36 33 34 31 31 45 35 42 39 34 38 46 38 39 36 45 42 34 42 39 34 37 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 43 38 34 38 32 35 46 30 36 33 34 31 31 45 35 42 39 34 38 46 38 39 36 45 42 34 42 39 34 Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C84825E063411E5B948F896EB4B9473" xmpMM:DocumentID="xmp.did:4C84825F063411E5B948F896EB4B94
Apr 26, 2024 06:11:45.067769051 CEST	765	OUT	GET /questionnaire.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0
Apr 26, 2024 06:11:45.327018976 CEST	1277	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:45 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:45 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"407df2209518c197453ec3f8cbff2752-gzip" Content-Encoding: gzip X-Host: grn99.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7673 Keep-Alive: timeout=10, max=75 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 9f e5 73 ee 7f 40 d9 6e 28 b7 7a 90 7a 3f 2c 65 1d c7 e9 a6 a7 49 dc 38 d9 de de 38 57 07 a2 20 89 31 45 32 24 65 47 eb e8 bf df 19 00 7c 49 a4 2d c7 ce 6e 72 8f bb 1b 8b 04 06 33 83 c1 60 30 03 82 c3 83 1f 9e be 3a 7a f3 d7 c9 31 99 07 0b 6b b8 77 80 3f c4 a2 f6 6c a0 30 5b 19 ee 15 0e e6 8c 4e e0 b7 70 10 98 81 c5 86 27 34 30 99 1d 90 63 fb e3 d2 f4 56 e4 84 ce 18 29 93 27 9e e9 8f a9 cd e0 de b4 c9 6b 36 a7 63 d3 32 03 00 76 6c 72 ca bc 0b d3 60 07 55 81 e2 60 c1 02 4a 5c cf 71 99 17 ac 06 8a 33 eb f9 66 c0 46 36 5d 30 85 18 8e 1d 00 81 81 b2 0b 4a 85 54 81 e9 6d 7c 9c 50 02 57 16 d7 79 6d 27 cc 37 3c d3 45 32 09 0c cf 1c 8f b8 02 8b 4f 02 87 4c 4d cb 22 a6 5d 22 1e 9b 32 cf a3 16 71 a6 21 00 94 03 04 67 fb 05 b5 81 d4 02 0b 4f 3c 67 e6 d1 45 1e 59 73 c1 79 8a 08 ce 83 c0 ed 55 ab 97 97 97 15 17 30 79 a9 fe 57 0c 67 51 a1 cb ea d2 b5 1c 3a f1 ab 7a 55 ab d6 ab ad aa ae d5 5b 75 bd d3 ac 8e 5d cf 2f 5b ce cc a9 7c 70 67 79 24 97 9e 75 5b 82 1f 97 cc c7 7b 9b 9a 1e ab a0 b6 70 e4 12 3b 8e e0 40 f9 77 08 50 12 44 9e cb 0c c6 f4 62 a0 1c 09 4a e5 37 2b 37 29 c7 80 7d 0a aa c8 68 9f 18 73 ea f9 2c 18 2c 83 69 b9 a3 44 32 11 5c 5f 98 ec d2 75 bc 20 d1 f4 d2 9c 04 f3 c1 84 a1 a6 95 f9 4d 09 38 33 03 93 5a 65 df a0 16 1b e8 15 ad b4 80 a2 05 94 2c 4d 98 2f 30 51 70 ae 58 a6 7d 4e cc 09 a0 40 cd 2e 8f a9 cf ca 7e b0 42 9d f4 98 35 50 f8 b5 3f 67 0c c8 05 c0 af 64 d3 f0 7d 85 cc 41 20 03 a5 5a 35 26 76 ad c2 26 66 b0 58 21 12 1c 01 04 a8 e2 8d 5f 81 ab c7 e3 a5 69 4d de 98 c0 bd de 6a 34 ea 2d bd d3 a8 89 b1 e6 f4 ef 4c c9 b1 26 d5 29 b5 8d d5 d8 f9 c4 09 7e 1d 32 be 63 a0 44 4d 90 7b a2 5f c1 66 bf 16 d0 94 02 25 c3 63 cc 2e 81 22 7f 60 86 d0 b1 5b b3 02 ba c7 fc ea 02 f4 6b c4 a1 e3 ce b5 db 7a ab 0b ed d0 7e 84 a3 17 cc 41 ff ca bc 7d 44 89 23 52 ab d5 29 e8 8a 5f 99 39 ce cc 62 d4 35 fd b0 53 8f a7 74 61 5a ab c1 11 cc 21 bb d7 d0 b4 52 1b fe c1 2f cc 27 cb 34 f0 4e 5c 3d f2 97 63 d4 49 0b 34 df 2e f1 bf 65 60 57 e5 7d 51 e3 be a8 a2 2f 6a d8 17 f5 f6 bc bc c0 7a 9c 6a 41 c8 d0 9d 88 ef 1d 70 80 cd aa e1 5e 45 88 8d 59 7c da fa f2 d6 76 82 f2 d4 71 02 e6 f5 e0 b2 28 4b 71 75 61 5e 04 bb 4f 26 e6 05 98 1f 8f c2 4c 77 61 ba dd 09 97 7b c7 f6 15 50 b2 c9 d2 08 ca 63 cb 31 ce e3 5b ae 1d f7 85 3b 61 2d ef 8a 52 94 4f 1d 6f 51 9e 9a cc 9a c0 42 3e 66 d6 d7 c2 fa a3 a8 90 d6 Data Ascii: =kw6s@n(zz?,eI88W 1E2$eG\|I-nr3`0:z1kw?l0[Np'40cV)'k6c2vlr`U`J\q3fF6]0JTm\|PWym'7<E2OLM"]"2q!gO<gEYsyU0yWgQ:zU[u]/[\|pgy$u[{p;@wPDbJ7+7)}hs,,iD2\_u M83Ze,M/0QpX}N@.~B5P?gd}A Z5&v&fX!_iMj4-L&)~2cDM{_f%c."`[kz~A}D#R)_9b5StaZ!R/'4N\=cI4.e`W}Q/jzjAp^EY\|vq(Kqua^O&Lwa{Pc1[;a-ROoQB>f
Apr 26, 2024 06:11:45.459541082 CEST	697	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/questionnaire.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0
Apr 26, 2024 06:11:45.688875914 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:45 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: blu151.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:45.877213955 CEST	764	OUT	GET /files/theme/images/radio.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0
Apr 26, 2024 06:11:46.114536047 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:46 GMT Content-Type: image/png; charset=binary Content-Length: 1503 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "bf44746166051d064f5a2db87a22c628" x-amz-request-id: tx00000a59b4867d4f29b79-0065da4b2d-e9549c7-sfo1 X-Storage-Bucket: z835a X-Storage-Object: 835adfd60e0ae3ba5027587907bb88e735c33324e484f07ea0bc9b257c2917fd Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 16 08 06 00 00 00 74 4b 4a 09 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 35 38 45 37 45 36 31 46 41 32 30 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 35 38 45 37 45 36 32 46 41 32 30 31 31 45 33 41 Data Ascii: PNGIHDRBtKJtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:258E7E61FA2011E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:258E7E62FA2011E3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.788522005 CEST	493	OUT	GET /uploads/1/0/3/6/10363185/background-images/575468987.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.painrehabilitation.com.au/contact.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:50.017875910 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx000007505f7a0e172b7d1-00662b241a-ef1e76d-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:10:50.017893076 CEST	159	IN	Data Raw: 21 42 b1 bd 7a d3 9e 12 e3 ba fb 6a 54 6e 54 52 ac e2 ac dd 20 95 6b 3e 9f b1 6d 80 82 61 2d fd a5 49 f4 0b e4 d4 c5 f4 43 76 74 1e 98 58 1c 08 71 60 2a 57 86 7f 23 63 be 7f a5 59 92 2c 76 68 1d 3c 96 c4 35 04 8b 69 08 3b 4f 98 c7 1f ce b9 a7 aa Data Ascii: !BzjTnTR k>ma-ICvtXq`W#cY,vh<5i;OsFJC(<h\|B<1k<M1!R7@K2sPP-=R*RWC
Apr 26, 2024 06:10:50.017968893 CEST	1289	IN	Data Raw: f3 ed 4a 73 5d 6d 4e 14 21 5f 93 bd 78 33 76 db 94 d2 09 2a 27 c8 67 3c d3 2e 9f b0 df ee b6 80 86 23 2d 09 51 fc cb 1e f4 e3 63 e9 84 e0 94 bb 2d c5 9e 3b 01 56 cf 4c 74 44 48 9a 96 1a 83 67 78 0a ef f4 a6 2b c7 4f a3 dc f5 5d c6 e4 9c 1d 8f 78 Data Ascii: Js]mN!_x3v*'g<.#-Qc-;VLtDHgx+O]xDSEO"@Jr}MOCH8Rr{I4q67v4Ww{)]#T]]U'R]iWE]=Ma AL[b2ce%?EQEQEQEQEQEQEQEQE
Apr 26, 2024 06:10:50.017980099 CEST	159	IN	Data Raw: d0 b6 bc bb 74 39 6b b9 47 5b 52 1d 92 a7 14 1c 18 2a ca 52 32 3f 4c 7d aa 39 eb f3 8e a8 a1 a5 84 e3 b6 2a 16 ed 2a 51 05 46 42 87 1e b4 a7 2d f7 9e 5e 16 eb 8a 1d b1 93 52 ba 77 4e 9b bc 94 31 1a 22 dc 5a 88 e0 27 fa d5 ed a3 ba 19 1d f6 db 7a Data Ascii: t9kG[RR2?L}9*QFB-^RwN1"Z'zni,Ibh';a)@Vb6}<^K(((((((((o
Apr 26, 2024 06:10:50.018022060 CEST	967	IN	Data Raw: 86 af e9 ad 8f a2 fa af 4d df 6e 3a 4d 9b cd c2 d6 ea 62 44 bb 80 0b 84 8e ed e1 2a 21 cf 34 1e 00 56 39 1d c7 f3 f3 a8 67 29 37 77 c4 37 c8 6c 28 e3 0a c8 a8 b5 bf 22 4a 80 52 d4 b5 1e 00 ef 4d 1a 4f 56 ce d3 93 d9 4b a9 52 d2 df e4 00 8f 4c 79 Data Ascii: Mn:MbD*!4V9g)7w7l("JRMOVKRLyf6H!<8OIzjS-K&<Q(u' WKU5hyymSJ,`WQEQEQEQ^xd6Y1Y[g\MlW
Apr 26, 2024 06:10:50.018084049 CEST	1289	IN	Data Raw: f4 2f c5 66 ac 6b a7 4c eb 0b b5 9e 3b f2 d0 f6 c2 1b 5e dd df 36 3c f3 53 a3 f1 6f 15 cd 17 1f 5c 5c b4 d3 ed 39 e2 78 5b 5b 52 54 7b e3 8e d5 e6 37 e3 6f 40 4d 69 28 99 16 e3 1d 7d 8e e8 e4 8f d5 39 ad b1 d7 fe 9e ea 70 51 1e f3 e0 95 ff 00 e6 Data Ascii: /fkL;^6<So\\9x[[RT{7o@Mi(}9pQI`.=;\pjr'OHJPgf8\J}*^!.':Ls:\Jz}S_c1 I$v'z^{B\MfLj>jF84y5fnlHV
Apr 26, 2024 06:10:50.018112898 CEST	159	IN	Data Raw: a4 3d 19 01 2a 00 e3 29 c8 a8 59 37 36 d1 d2 b6 2c c7 77 88 b9 64 fd 81 ce 6b 6e 43 c8 57 49 e2 5a 3c 71 e3 2e 5e 76 f7 38 ce 69 72 d5 a7 bc 55 a7 72 bc f9 ab 27 4c e9 96 81 49 52 01 c7 9d 5a b6 0b 5c 48 49 4a d4 94 24 0f 32 29 9d bb db 4d 24 6d Data Ascii: =*)Y76,wdknCWIZ<q.^v8irUr'LIRZ\HIJ$2)M$mpZ>XQRs GR\|QL_dXIy4a[bSq
Apr 26, 2024 06:10:50.018182039 CEST	1289	IN	Data Raw: 5a 48 6b 01 3e 84 9f ff 00 55 5c 16 4d 26 b7 10 82 f8 c2 7d 00 a7 5b 5e 98 88 c0 49 0c 8f 72 45 4d 08 31 63 a7 7a 92 91 8e f9 35 91 b9 90 8a 4a 43 a8 18 f7 ad 55 df 6d 8d bb e1 2a 53 61 47 81 95 56 c9 95 1d 4d f8 a1 d4 60 fb d7 d0 f3 6a 00 ef 49 Data Ascii: ZHk>U\M&}[^IrEM1cz5JCUmSaGVM`jIry;QEQEQEQEQEQEQEQEQEVmwMq)XR~;E?,ia\t?J<A`qzp\|~4da!IF@ jCy]yP$)P-
Apr 26, 2024 06:10:50.018292904 CEST	159	IN	Data Raw: a7 dd 0e 92 10 db b2 d8 5a 96 71 ca 93 9a bb b4 ff 00 4a 22 46 71 b0 e3 69 46 07 e5 f3 af 3a 86 74 8d 0a d3 c6 c9 67 6d f5 07 89 5a c9 1c 7c a2 b4 1a eb bc c8 d1 10 64 5b f0 e1 e4 27 20 03 f7 a6 2b 17 5b 66 5f a5 33 6f 8e da 19 52 86 e5 28 ac 7f Data Ascii: ZqJ"FqiF:tgmZ\|d[' +[f_3oR(*^U%nkt%>u]xbb.:.'%y}8BIHPmPQhvJN
Apr 26, 2024 06:10:50.018353939 CEST	1289	IN	Data Raw: 3c 67 13 f3 62 b5 ed 7f 88 3e a2 2a 73 11 22 dc a1 be da 3b a9 5d d4 3c fe f4 ef 07 f1 76 fc 59 2b b5 cf b5 95 3e c8 00 94 38 0e ea 79 d1 7d 7d 6f 59 5c c4 36 ed cf b4 09 03 73 89 c2 7f 5a ba 63 be 1d 69 2a 5e 39 1d b3 4f 74 51 45 14 51 45 14 51 Data Ascii: <gb>s";]<vY+>8y}}oY\6sZci^9OtQEQEQEQEQEQEQEQEQEWTI[-&mQTV~JZJIHo{qINtE(C\|}dzf4a7XRbdq>*Kf~9RZ%GUf)s]
Apr 26, 2024 06:10:50.018364906 CEST	159	IN	Data Raw: 80 09 18 cd 47 ea 0d 3e d3 8c a9 1b 12 ad dc 62 95 ad 5d 28 44 f7 92 cb 50 f7 a9 67 24 01 9f 3a bf fa 7d d1 88 76 e6 5b 5b d1 12 15 80 4f 15 6f c5 d3 b0 2c f0 fc 55 34 94 84 27 35 52 6a fe a2 db 9a b8 3d 0a df 2b 63 e9 dc 8d c3 b0 35 c9 da d3 5f Data Ascii: G>b](DPg$:}v[[Oo,U4'5Rj=+c5_&\|)9'q^Qk0@'ZSM^_)(x>z\|sXIr\|dn;
Apr 26, 2024 06:10:50.219907045 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx000007505f7a0e172b7d1-00662b241a-ef1e76d-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:00.072499990 CEST	765	OUT	GET /files/theme/images/scroll.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:11:00.305414915 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:00 GMT Content-Type: image/png; charset=binary Content-Length: 1837 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:58 GMT x-rgw-object-type: Normal ETag: "339a7f37eb8527f719df1ba12d2cefb1" x-amz-request-id: tx00000289e08211bd7e97f-0065e90ccb-e95274c-sfo1 X-Storage-Bucket: z3a8f X-Storage-Object: 3a8fc37ed708c8e7d7dbd4d86f5b68a8b1df9ba0b651dc97d74ac7d26d307df1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 34 08 06 00 00 00 c5 78 1b eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 39 35 34 45 33 38 33 46 33 32 33 31 31 45 33 39 41 38 31 45 33 42 43 44 38 46 30 38 30 30 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 39 35 34 45 33 38 34 46 33 32 33 31 31 45 33 39 Data Ascii: PNGIHDR44xtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:B954E383F32311E39A81E3BCD8F08007" xmpMM:DocumentID="xmp.did:B954E384F32311E39
Apr 26, 2024 06:11:04.385149956 CEST	763	OUT	GET /uploads/1/0/3/6/10363185/background-images/359933816.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/about-us.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0
Apr 26, 2024 06:11:04.615991116 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:04 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000020b699e9e58b9ed8-006627f2d1-e9549c7-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:06.999104977 CEST	769	OUT	GET /about-the-program.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Apr 26, 2024 06:11:07.247123957 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:07 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:07 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"5fc43e71baf1b29d0ff668ab19530285-gzip" Content-Encoding: gzip X-Host: grn67.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7644 Keep-Alive: timeout=10, max=46 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d ed 72 db 38 92 bf ed aa 7b 07 8c 66 2f 94 67 f4 2d cb b2 25 cb b3 8e e3 99 cd d6 64 e2 8d 9d 9d bb 4a 72 2a 88 84 24 c6 14 c9 10 a4 15 ad a3 77 b9 67 b9 27 bb ee 06 f8 25 51 b6 15 67 f6 3e ca 99 89 24 02 8d ee 46 77 a3 d1 0d 02 c8 f1 77 2f 5e 9f 5d fd fb c5 39 9b 86 33 e7 64 f7 18 bf 98 c3 dd c9 a0 24 dc d2 c9 ee ce f1 54 70 0b be 77 8e 43 3b 74 c4 c9 e9 c8 8b 42 16 4e 05 bb 08 bc 49 c0 67 ac ca 9e 07 b6 1c 71 17 8a b8 ed b2 37 62 ca 47 b6 63 87 3c b4 3d 97 5d 8a e0 c6 36 c5 71 5d b5 3f 9e 89 90 33 3f f0 7c 11 84 8b 41 c9 9b f4 a4 1d 8a a1 cb 67 a2 c4 4c cf 0d 85 1b 0e 4a 0f 41 59 62 75 e0 78 1d 1f 11 ca e0 5a 63 79 53 43 4b 48 33 b0 7d a4 91 69 fe d2 b5 ec 1b db 8a b8 c3 ce bc 99 ef b9 50 da 63 ff f5 9f ec 9c 9b 53 e6 03 4b 50 c0 6c c9 ec 04 d0 59 30 2e a5 80 ff 2d 36 5a 10 e9 1b 1e d8 5e 24 59 28 40 64 33 31 1b 89 40 b2 1a 7b 03 cd dd 89 64 3c 10 2c e4 d7 c2 65 5c b1 3a 12 13 db 75 a1 8e 71 d7 62 02 fe 7a 63 aa f0 b5 d8 43 8f 01 e7 33 3b 04 00 4d 6d 86 8c 00 18 74 d7 f4 66 42 d6 88 c5 5a ad b6 a9 c3 f6 8c 4f b2 92 9a 86 a1 df ab d7 e7 f3 79 cd 07 b9 07 39 b1 d7 00 67 8d 47 f5 c8 77 3c 6e c9 7a b3 de a8 b7 eb 07 f5 66 a3 7d d0 6e 1e 76 ea 23 3f 90 55 c7 9b 78 b5 8f fe 64 13 c9 28 70 b6 25 c8 51 7f 55 e8 7b 55 f7 bd 86 56 4a 04 e0 8f a2 81 88 aa e2 53 64 df 0c 4a 67 0a 7b f5 6a e1 67 3b 17 8a cf 61 1d 5b f6 99 39 e5 81 14 e1 20 0a c7 d5 c3 52 c2 28 da e0 a0 74 63 8b b9 ef 05 61 a6 e9 dc b6 c2 e9 c0 12 68 75 55 7a a8 80 b6 ed d0 e6 4e 55 9a dc 11 83 66 ad 51 99 41 d1 0c 4a 22 1b 06 0e 8c 18 1c 34 8e ed 5e 33 db 02 14 68 e5 d5 11 97 a2 2a c3 05 da 67 20 9c 41 89 7e cb a9 10 40 2e 04 7e 35 9b a6 94 25 36 0d c4 78 50 aa d7 4d cb 6d d5 84 65 87 b3 05 22 41 b1 20 40 1d 1f 64 0d 7e fd 34 8a 6c c7 ba b2 81 fb e6 c1 fe 7e fb a0 79 b8 df 52 0a 20 fa 8f a6 e4 39 56 7d cc 5d 73 31 f2 3e 13 c1 3f 86 8c f4 4c 94 a8 0d 72 cf f4 2b 5c ed d7 0c 9a 72 a0 64 06 42 b8 15 b0 89 8f c2 54 63 76 6b 56 c6 36 40 d4 67 60 7a 43 82 4e 3b d7 ed 36 0f 8e a0 1d fa 92 58 7b 60 82 33 51 a5 f6 09 25 42 64 d4 eb 63 b0 15 59 9b 78 de c4 11 dc b7 65 dc a9 9f c6 7c 66 3b 8b c1 19 18 b6 db db 6f 34 2a 5d f8 0b df 60 e4 8e 6d e2 93 fa f5 4c 46 23 b4 49 07 3d 42 85 3e ab c0 ae 41 7d 31 d2 be 18 aa 2f 46 dc 17 63 7b 5e 5e 61 bd 08 02 1e c6 0c 3d 8a f8 ee 31 01 ac 56 9d ec d6 94 d8 84 23 d0 33 49 fd e8 7a 61 75 ec 79 a1 08 7a f0 b3 ac 4b 71 9a 11 41 02 bb c7 Data Ascii: =r8{f/g-%dJr$wg'%Qg>$Fww/^]93d$TpwC;tBNIgq7bGc<=]6q]?3?\|AgLJAYbuxZcySCKH3}iPcSKPlY0.-6Z^$Y(@d31@{d<,e\:uqbzcC3;MmtfBZOy9gGw<nzf}nv#?Uxd(p%QU{UVJSdJg{jg;a[9 R(tcahuUzNUfQAJ"4^3hg A~@.~5%6xPMme"A @d~4l~yR 9V}]s1>?Lr+\rdBTcvkV6@g`zCN;6X{`3Q%BdcYxe\|f;o4*]`mLF#I=B>A}1/Fc{^^a=1V#3IzauyzKqA
Apr 26, 2024 06:11:07.274362087 CEST	701	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/about-the-program.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Apr 26, 2024 06:11:07.501985073 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:07 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: blu151.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:07.589195967 CEST	773	OUT	GET /uploads/1/0/3/6/10363185/background-images/1922450623.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/about-the-program.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Apr 26, 2024 06:11:07.821072102 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:07 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000020b699e9e58b9ed8-006627f2d1-e9549c7-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:09.461658001 CEST	772	OUT	GET /health-professionals.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:09.743623018 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:09 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:09 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"513981159733d92fcf703fe83af9c181-gzip" Content-Encoding: gzip X-Host: grn86.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 10442 Keep-Alive: timeout=10, max=47 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 79 77 db 38 f2 e0 df f6 7b fb 1d d0 ea d9 48 9e d6 2d cb b2 e5 a3 c7 71 ce df 8b 13 77 ec 4c 6f 6f 92 f5 83 48 48 62 4c 91 0c 41 5a d6 b8 fd dd b7 aa 00 f0 90 28 5b ce d1 3d 3d e3 74 5b 12 71 14 0a 85 42 5d 00 81 bd 1f 9e bc 39 3a fb ed e4 29 1b 47 13 f7 60 7d 0f bf 98 cb bd d1 7e 49 78 a5 83 f5 b5 bd b1 e0 36 7c af ed 45 4e e4 8a 83 17 82 bb d1 98 9d 84 fe 50 48 e9 f8 1e 77 25 ab b1 c7 a1 23 07 dc 13 ec 84 3b 1e 7b 2b c6 7c e0 b8 4e c4 23 28 c1 4e 45 78 e9 58 62 af a1 40 ec 4d 44 c4 59 10 fa 81 08 a3 d9 7e c9 1f f5 a5 13 89 73 8f 4f 44 89 59 be 17 09 2f da 2f ad 02 b2 c4 1a 80 f4 22 3c 6a 28 03 ab 08 eb 65 75 6d 21 ad d0 09 b0 99 0c 84 37 71 c8 c6 0a 8a c5 43 81 55 32 04 b0 fc 89 60 91 3f 12 d1 58 84 f0 03 b3 2f 1d 5b b0 99 1f b3 a9 03 95 38 94 95 11 f7 2c c1 a0 37 50 8c 4d b8 c7 47 62 02 d0 99 3f c4 82 21 d6 1a b8 62 52 67 67 63 e1 84 4c 5e 38 2e 00 c7 e6 6c 67 38 14 21 94 ad 62 5b 81 eb 60 3d 1e ce aa 8c 7b 36 d4 87 4c c6 d9 25 0f 1d 11 cd 10 1e 0f 00 18 b7 c6 42 d6 d9 53 f8 ae d7 eb cb 3a ec 4c 00 8f 4c 57 c7 51 14 f4 1b 8d e9 74 5a 0f 80 f4 61 8e f2 75 68 be ce e3 46 1c b8 3e b7 65 a3 d5 68 36 3a 8d ad 46 ab d9 d9 ea b4 b6 bb 8d 20 1e b8 8e 1c 0b bb 61 4b ab d6 6c 6e ed d4 3f 05 a3 9f 5b dd ad 56 07 8a 6c 77 fe 18 34 76 3a 9b ad ee 76 af 1e 78 a3 3f ba df 03 e1 d5 82 b1 1f f9 b5 76 cd 0f 9d 91 ea 3f 74 bf db 86 cf ad 3f 06 1d 37 b6 66 b5 88 cf 5c 3f ac b5 3b bd 2b f8 3b 27 64 fe 04 82 8c 1c 8f d7 46 02 98 d4 cb 10 a4 db 6c 6f 6d 6f 77 bb db 7f 0c 3a c2 76 22 3f 6c 4c c5 00 85 8d 1e 20 98 66 b6 53 93 3c f6 6c 11 ca f3 96 c2 6c 73 a7 d5 da d9 ea 35 9b 7f 0c 66 92 5f 42 d1 3f 6d 74 02 3f 8c 42 ee 44 35 3b 04 81 06 14 10 44 82 ad 56 7b 67 fb 8f e2 d6 e0 ca ad b5 9b ed 56 73 a7 d5 04 76 6d 83 d8 e8 b6 db b5 ee b9 61 97 3f 06 8d 41 10 ca 9a eb 8f fc db 9a 8c 43 f7 be 0d 2a c5 51 cb e9 8c 3a aa 5a 6a 03 fe a9 66 10 56 4d 7c 8e 9d cb fd d2 91 6a a0 76 36 0b b2 fd 8b c4 55 d4 c0 9a bb cc 1a f3 50 8a 68 3f 8e 86 b5 ed 52 82 2b 6a d1 fd d2 a5 23 a6 38 b0 99 aa 53 c7 8e c6 fb b6 40 bd 59 a3 87 2a a8 22 27 72 b8 5b 93 16 77 c5 7e ab de ac 4e 20 69 02 29 b1 03 da 1f d4 3e 6a 7e d7 f1 2e 98 63 03 08 9a 3a 03 2e 45 4d 46 33 d4 b0 a1 70 f7 4b f4 1b 78 49 40 73 11 e0 ab d1 b4 24 e8 d8 71 28 86 fb a5 46 c3 b2 bd 76 1d e7 e0 64 86 40 90 32 58 a0 81 0f b2 0e bf 7e 1e c4 8e 6b 9f 81 62 db 6f 6d 6d 6e 76 b6 5a db 9b 6d 35 06 d4 fe Data Ascii: }yw8{H-qwLooHHbLAZ([==t[qB]9:)G`}~Ix6\|ENPHw%#;{+\|N#(NExXb@MDY~sODY//"<j(eum!7qCU2`?X/[8,7PMGb?!bRggcL^8.lg8!b[`={6L%BS:LLWQtZauhF>eh6:F aKln?[Vlw4v:vx?v?t?7f\?;+;'dFlomow:v"?lL fS<lls5f_B?mt?BD5;DV{gVsvma?ACQ:ZjfVM\|jv6UPh?R+j#8S@Y"'r[w~N i)>j~.c:.EMF3pKxI@s$q(Fvd@2X~kbommnvZm5
Apr 26, 2024 06:11:09.786215067 CEST	777	OUT	GET /uploads/1/0/3/6/10363185/published/dsc-0069.jpg?1561336383 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.063359022 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:09 GMT Content-Type: image/jpeg Content-Length: 9280 Connection: keep-alive Last-Modified: Mon, 24 Jun 2019 00:33:03 GMT x-rgw-object-type: Normal ETag: "28973745f066d278e135604f391f61e5" x-amz-request-id: tx00000cbc00c16abb6637c-00662b295d-e8f48a8-sfo1 X-Storage-Bucket: z9fa9 X-Storage-Object: 9fa900381b14ce0aed259bd0ad54706df6fb65bbfd0cc134f3268f87cbff6df8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 f9 00 d9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 ff c4 00 45 10 00 01 03 02 04 03 05 04 07 06 04 05 05 01 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 13 22 61 71 81 07 14 32 91 15 35 42 72 a1 b1 c1 23 24 25 33 52 d1 16 34 53 f0 43 62 73 b2 e1 17 36 54 63 93 a2 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff c4 00 25 11 00 03 00 02 03 00 02 02 02 03 01 00 00 00 00 00 00 01 02 03 11 12 21 31 04 41 13 51 14 22 32 52 61 15 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 dc 64 8c e4 3a 28 05 ba 94 72 78 ad 19 41 5f a3 9c 12 1a d0 69 ec 6c 81 62 aa 9c 6c 2f 85 d4 7d d2 ad 87 62 aa bc 6a 3f 86 4f f7 4a 0a 45 a0 2f b1 16 b1 d4 15 6e 23 be 26 70 f4 5a 1c f9 4d 5e 5b 72 59 bf b1 1c ce 86 b5 a0 1d 25 3b 2d 1e 58 9c 2a 73 58 a1 b6 9a e9 18 ab aa 3b 35 1b 5d 19 36 b0 08 6d cc 53 ea 6e a5 56 57 98 58 41 28 4c 75 06 a6 52 fe 4b 36 5b 5a fe be 93 c6 17 7c ff 00 b2 b5 f5 43 ee ee d3 35 ca 4b aa 2c ec b7 f0 4e 03 dd 26 fa 21 c4 ea fa 2e af a3 d2 d4 c9 96 d9 b4 f1 5c c1 eb db 1d 68 b9 01 f7 e6 a3 3c ba 70 5b 18 b9 b6 e8 23 5b 34 38 93 5a fd 09 3c d3 95 52 6a be 85 f3 eb 46 bd 16 2a c3 07 7b 7b 20 95 e4 cd 21 23 ed 28 54 ec 79 83 ba 6f a2 53 66 7b 64 05 cd 27 29 d5 74 ea 79 ad 30 95 bf b0 e5 36 16 d3 0e 67 0b 9b 28 75 59 61 69 69 b8 23 4d 02 3b 47 50 c7 c2 2d 6f 25 12 ae 90 3e e7 74 c5 13 2b 49 14 d7 e8 c5 f1 fc 46 5a 5e 33 a1 cb 2b 84 7d a1 2e 65 f4 2b 68 c2 f1 48 65 a2 63 89 00 db 65 89 71 f5 2b 69 f8 a6 86 fd dc d2 Data Ascii: JFIFC%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("E!1AQ"aq25Br#$%3R4SCbs6Tc%!1AQ"2Ra?d:(rxA_ilbl/}bj?OJE/n#&pZM^[rY%;-XsX;5]6mSnVWXA(LuRK6[Z\|C5K,N&!.\h<p[#[48Z<RjF*{{ !#(TyoSf{d')ty06g(uYaii#M;GP-o%>t+IFZ^3+}.e+hHeceq+i
Apr 26, 2024 06:11:10.520596981 CEST	772	OUT	GET /uploads/1/0/3/6/10363185/lucy-taylor-237x237_orig.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:10.781277895 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/png Content-Length: 84346 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:02:51 GMT x-rgw-object-type: Normal ETag: "402708ea4c7b568312b7516afc6e850f" x-amz-request-id: tx00000a0cd02dde3bcdea7-00662b295e-e9549c7-sfo1 X-Storage-Bucket: z25ac X-Storage-Object: 25aca3dc3d163c9d47b230f39dae8c4219a50e7bfa348450b9992cadb0e90d9e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ed 00 00 00 ed 08 02 00 00 00 dc 2f 65 d8 00 01 49 41 49 44 41 54 78 da ec 9d f7 77 14 67 d6 a0 bf 3f 67 cf d9 73 76 cf ec ce ec 8c 8d c3 18 27 8c 4d ce c9 80 c9 51 08 24 40 a0 2c a1 9c 33 12 ca 39 e7 96 5a a9 15 5a a1 73 0e d5 d5 d5 55 5d dd 5d b9 ba 25 b0 e7 ec 8f 7b ab 65 2b d8 23 7d 18 cc 67 9b e5 3d 8f 8b aa ae 16 c8 e8 e1 72 ef 7d 6f 89 ff 08 ae fc 6b 95 d0 8b ff bb c6 f2 f3 7f 2d af bc 58 63 e5 f9 f7 2b 2f 7e 58 23 b4 35 cb cf bf 87 f7 bf 3e c1 d0 ca 3a cb cf 37 de 82 cb 8d 77 37 7d 60 f8 d6 cb 12 7c 79 42 9b 78 c5 15 da 88 20 04 37 00 8b db 0a 9e 67 7f 47 38 8e 79 49 7e d5 07 be f4 27 c0 f1 db 2e 8e 93 de 00 bf b9 5b 79 fc c3 0a e8 bb ca af f4 18 de ff 5a fc c2 e3 d0 f2 f3 8d 77 43 9b 65 5d bf f5 3b 7b 2c be 96 c7 22 bb 15 ef 3c 7e 29 8f 57 56 be ff 25 a0 e3 d6 b2 6e ad 38 b0 d9 e3 4d b7 c2 1f f8 9b 03 46 be 12 cf 83 c1 17 5b f0 fc 25 fd 06 21 85 20 cf 4b 70 7c 10 9c e3 82 a2 08 2f fd 84 18 e4 85 35 84 a0 c8 87 44 f8 2d 5f 85 13 57 59 0e 13 e2 44 f8 e0 5f 02 ef 17 fe eb ed 7c d3 5a ff 36 8a 03 9b 3d 7e f1 4b de 7a 8f 01 f0 75 0b e0 d6 32 84 cc 2d 59 0f d2 41 50 35 2c 24 1b 86 09 8a 02 bc 14 06 4e 45 51 10 d6 00 cb c3 ba f3 a0 a6 e4 b1 b0 e6 f1 0a 1c df 02 8f b7 e7 8d 7b 1c 5a 79 f1 6f d8 d6 e3 8d ef 5c de ec 31 5c ae df fd 85 c7 f0 ca 6f cc 6b 79 bc 35 db 2c 71 0d f8 4f 08 c7 56 56 22 24 21 08 bc b0 c5 e2 21 43 08 32 10 b6 7f b4 59 14 c3 61 3a 24 21 4a be fe 5b de 79 fc da f1 f8 fb 1f fe 1d 6f 53 3c 5e de 82 d0 66 61 37 23 4a a9 44 08 10 58 20 28 d0 41 9e 0a f2 81 a0 e0 17 85 00 0f 65 99 c0 ff 08 1c 84 35 e0 82 e1 04 8a 83 a3 04 cb 8b f0 8a 18 26 08 47 b8 dc 8a 3f a9 c7 2c 4b 6f e4 f7 f1 38 f4 e2 fb e0 0f 3f 6c c5 cb 7b 0c 97 1b f9 23 79 0c be 6e b3 a4 40 bb 4e 68 fd 32 24 72 cb 3c 03 84 78 1a 08 72 fe 20 e7 13 59 af c0 e2 02 eb e5 d8 00 c7 52 61 02 3c 47 05 05 26 28 b9 ce 88 3c 23 8a 8c 20 d2 bc 40 f1 70 e4 21 72 73 ab c1 7b b5 ce 13 05 6e 0d 01 2c df c0 3b 8f b7 f7 18 96 28 8a ff b1 a6 e0 e6 78 bc 95 c7 10 92 e1 cd 2f cd 66 e7 Data Ascii: PNGIHDR/eIAIDATxwg?gsv'MQ$@,39ZZsU]]%{e+#}g=r}ok-Xc+/~X#5>:7w7}`\|yBx 7gG8yI~'.[yZwCe];{,"<~)WV%n8MF[%! Kp\|/5D-_WYD_\|Z6=~Kzu2-YAP5,$NEQ{Zyo\1\oky5,qOVV"$!!C2Ya:$!J[yoS<^fa7#JDX (Ae5&G?,Ko8?l{#yn@Nh2$r<xr YRa<G&(<# @p!rs{n,;(x/f
Apr 26, 2024 06:11:10.792414904 CEST	1020	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:11.066314936 CEST	629	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:10 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu102.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=26 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:25.807843924 CEST	658	OUT	GET /files/theme/custom.js HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.038181067 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 02 Jan 2020 17:35:32 GMT x-rgw-object-type: Normal ETag: W/"5da53b567e46be3a2bd71096fb2995bc" x-amz-request-id: tx00000fc8020f68deb7fe3-0065134e38-db1c716-sfo1 X-Storage-Bucket: z5feb X-Storage-Object: 5feb822d8698f127f0f85d3edf620c63ff5189509fb85992c1d74abbd25d83ee Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Content-Encoding: gzip Data Raw: 37 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c5 58 6d 8f db 36 12 fe 7c fb 2b 58 ed 02 92 b1 96 76 5b 20 b9 20 ce 06 68 37 4d 1b 20 db b7 04 b8 03 0e f7 81 96 c6 36 1b 4a 54 25 ca 5e 37 f1 7f ef 8c 48 59 d4 8b bd de f6 2e 35 90 ac 6c 71 de 67 1e 3e e4 af 3f 57 50 6c 83 45 95 c5 5a a8 2c 98 b0 8f 67 0c 3f 67 ff 58 f3 82 5d b0 1b f6 6b bd 62 66 7e a5 ff e8 c5 fb 15 a4 80 2f cd 62 c6 44 a6 a1 58 73 f9 9c ed 35 c5 2a 4b 04 3d 4d 19 8f cd df a4 2a b8 79 92 22 15 7a b2 17 37 4a 63 55 91 1a 54 7b 3d eb bc 90 4a e5 f5 ef 25 e8 37 d6 92 e3 72 ab 05 1d 59 b0 a0 d1 f3 f2 c6 d8 61 9f 3e 19 87 a3 78 05 f1 87 6f 25 3e 66 ba 75 70 e2 3a 42 9f 58 02 2f f6 86 8c f5 c9 cc 59 b2 63 20 4b e8 49 71 eb ce ac ab cb 38 73 79 d9 91 df 3f ef da ac ec 05 77 53 fb e0 ba eb 64 b6 04 09 b1 56 85 eb 76 01 ba 2a 32 76 d1 be 8c 24 64 4b bd 1a 28 4d d5 1a ee 44 26 62 5e b8 4a fb c5 a0 65 98 f1 8b c0 3b df 94 42 43 98 a2 4c 48 42 de 24 4a 40 f3 78 e5 86 4a eb 32 be 16 cb 3a 14 5c c2 f3 1c b2 24 20 35 93 51 1f 5e cb ad aa 1e e7 01 64 55 f9 17 ac 9f b5 ff 9f 9d 19 b1 44 c5 15 65 77 12 15 c0 93 b1 39 70 1b eb 22 d8 88 2c 51 9b 49 b4 11 89 46 0f a8 c5 fe f9 f4 59 b7 7f 4c ab 35 13 d1 f1 8c 0d 72 39 b5 cb dd aa 4c d9 93 eb eb 29 7b d6 e9 a4 53 b4 d6 f9 71 35 9a 1c 8f e8 6b 1b b0 1b e5 d5 15 fb 0e 32 28 b8 64 a5 de 4a 91 2d cf 9c 24 fb 73 95 6c 7d cc 6e 92 dc 4a 5e 96 81 9f ab 52 4b c5 13 df d1 ed 2a bb 53 73 21 81 91 67 c3 f7 54 b5 b4 5e 80 15 8b a5 88 3f b4 f9 87 49 77 b8 20 ca 0b 58 63 a5 5e c1 82 57 52 f7 c7 6c d0 01 5a 2d 97 12 8c 9b 1e dc e7 3c 4b 20 f1 7a 52 a6 a8 3d c9 15 2f 07 62 7d 84 18 9a 0c 37 05 cf 29 0e 14 fc e8 a5 fc 3e 5c 81 58 ae b4 f7 dc ed 1b f3 1b 36 4e 88 35 99 5c 32 2f bf f7 76 93 59 5f f5 21 5b 6d b6 4e b5 f2 e5 f5 a9 66 76 dd 7c 0f f1 ed f4 80 bd eb 87 ed 39 10 e8 f6 4e a7 79 78 a9 57 38 96 ee 6f e1 ff e5 73 75 35 da bd ef 34 f6 e4 96 fd c0 d7 1d 18 f8 02 13 41 93 80 c1 0b ec Data Ascii: 771Xm6\|+Xv[ h7M 6JT%^7HY.5lqg>?WPlEZ,g?gX]kbf~/bDXs5K=My"z7JcUT{=J%7rYa>xo%>fup:BX/Yc KIq8sy?wSdVv2v$dK(MD&b^Je;BCLHB$J@xJ2:\$ 5Q^dUDew9p",QIFYL5r9L){Sq5k2(dJ-$sl}nJ^RKSs!gT^?Iw Xc^WRlZ-<K zR=/b}7)>\X6N5\2/vY_![mNfv\|9NyxW8osu54A
Apr 26, 2024 06:11:26.041127920 CEST	767	OUT	GET /files/theme/images/comments.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.273237944 CEST	1277	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/png; charset=binary Content-Length: 1501 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "c8c0701a09179919f6bc2f6ee5b74ef6" x-amz-request-id: tx0000004584339ebea2139-00652ef420-db1a132-sfo1 X-Storage-Bucket: z97b2 X-Storage-Object: 97b2893ebbdc56c81a2a238b8ee439f478f4c220752f9af48d751b86cedb468b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 14 08 06 00 00 00 93 40 2d be 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 33 32 36 42 42 45 39 46 42 41 45 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 33 32 36 42 Data Ascii: PNGIHDR@-tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE9FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326B
Apr 26, 2024 06:11:26.285552979 CEST	999	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:26.574004889 CEST	628	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:26 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu51.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=75 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:40.006736040 CEST	767	OUT	GET /files/theme/images/checkbox.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0
Apr 26, 2024 06:11:40.240223885 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:40 GMT Content-Type: image/png; charset=binary Content-Length: 1257 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "e8e61d02c59ca3f3cc4ecbf78491cc8f" x-amz-request-id: tx00000316ca19de01b47aa-0065da781c-e8f4575-sfo1 X-Storage-Bucket: z695f X-Storage-Object: 695f86e322e77356cdc369934228828ddc66fcd307ab442478cd01f0e2ca2a2a Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 14 08 06 00 00 00 39 83 eb 02 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 45 45 34 45 43 45 32 46 41 35 32 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 45 45 34 45 43 45 33 46 41 35 32 31 31 45 33 41 Data Ascii: PNGIHDRB9tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:1EE4ECE2FA5211E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:1EE4ECE3FA5211E3A
Apr 26, 2024 06:11:45.956638098 CEST	1013	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/questionnaire.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:46.211566925 CEST	628	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:46 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu143.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=2 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.789956093 CEST	354	OUT	GET /uploads/1/0/3/6/10363185/bprs-logo.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:50.020879984 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 17218 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:22 GMT x-rgw-object-type: Normal ETag: "369512fff14fff9fdf18a74f89a016fd" x-amz-request-id: tx00000c6be2cfcc40192d5-0065dabbf9-e8f44ee-sfo1 X-Storage-Bucket: za948 X-Storage-Object: a948c0a77c5c9a6711fd0d05cfce0f7b8ba9f1ec100796a67c773cc3eef923bf Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 64 02 32 03 01 11 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 09 01 04 05 03 02 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 04 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 da 98 00 00 00 00 00 00 00 00 00 00 1f 93 5f 29 d8 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 5f b6 fa 6c 7b 3e 00 3d bc 39 e7 9d 56 db bf 4b c2 9b 3d 56 0f eb f2 01 ec 62 cd 3b ea 76 de 9d 32 41 9b 5d 4e 21 e9 f2 81 df a6 49 cf 55 b5 c8 70 e7 18 57 a7 cb 5b 77 9a 3c 6b 36 0c bf cf e9 b2 ba 3d ee 51 83 3f e4 d7 62 db 15 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 c0 81 23 f8 36 1b 56 e0 3e 81 af 1e c7 8c ae 1b dd 10 03 38 f1 fb 76 a1 c0 77 fa f2 ec f8 c8 13 71 a6 00 7b 78 73 6d 57 e7 df 42 fc 1a aa fa 17 cf 7c 7c b8 78 39 32 9f 37 a7 6c df 3c fa 2f a5 8f 26 bb 16 d8 aa b1 fc 4d 70 95 8d 9a c8 31 35 ca 26 c5 4d 7f 69 ad 49 b2 8a f2 90 00 e4 15 e6 b3 83 5a 2d da 3f 69 86 ab 39 dd eb 95 44 8e 40 00 00 00 00 03 83 56 7d f7 cf e2 9d 96 b6 72 d4 6d e4 df 07 be a0 74 dc c8 da 1f 03 df d4 be 87 9d ae 1b dd 14 93 e0 f7 d9 9d 0e fe 8f 75 bc 97 08 be 7c 87 61 03 ed f5 10 26 e3 4d 2a eb 76 56 6f 45 be a2 9d 77 23 f2 9a de 4e 4b ad ea da 29 2f 57 c9 e7 de 2f 6e cc 78 5e ef 55 3f 41 f9 ef 8d 9b 0e c9 f8 7e ea 7a d3 ee 35 d8 b6 c5 55 a8 d4 b6 bc ec 9a 2d 5f 36 2d 85 4c 59 f3 1b 45 78 a6 49 5a f4 9c 6a 88 6d 19 fd 2d 12 da 2c 19 06 4b 68 aa ea 2b 16 6f 0a f5 9d 2d 4c 1a 27 38 ac f3 6a e0 c9 bf 16 a4 d9 5b 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 b6 bb 9d Data Ascii: JFIF&""&0-0>>T) )/'%'/9339GDG]]}d26_)B_l{>=9VK=Vb;v2A]N!IUpW[w<k6=Q?bT#6V>8vwq{xsmWB\|\|x927l</&Mp15&MiIZ-?i9D@V}rmtu\|a&M*vVoEw#NK)/W/nx^U?A~z5U-_6-LYExIZjm-,Kh+o-L'8j[
Apr 26, 2024 06:10:50.020890951 CEST	79	IN	Data Raw: e8 ed 8f 3b d1 6a 7f e8 9f 3a e4 da b7 cf be 87 4e 3a 4e 66 b8 6f 74 53 8e a7 6f b3 1e 17 bb d3 af d2 be 67 e3 e6 c3 71 b9 8e 9e 34 f7 f8 60 4d c6 9a c1 e9 37 7b 1f e2 bb 6d 41 fd 23 e6 d8 cf a3 05 df e4 fa cf 03 3e 0a 7f d2 f3 39 16 0c Data Ascii: ;j:N:NfotSogq4`M7{mA#>9
Apr 26, 2024 06:10:50.020941019 CEST	1289	IN	Data Raw: fb 3f e0 7b ff 00 07 36 0e 8d eb 25 f8 bd b9 0e 0f 46 bb 16 d8 aa b5 1a 96 a2 d6 7b 36 76 6d 4f 23 16 59 92 f4 8b e6 31 4a 5f 39 ac 7b b9 6b 01 52 d9 fc 3d cb 22 d9 89 5d 3b 3b 9c 5a b8 c3 9e 73 cd 8b 30 c7 92 96 4b ec af 72 59 22 d6 f2 d8 6d fd Data Ascii: ?{6%F{6vmO#Y1J_9{kR="];;Zs0KrY"mnpjSsk8\|wAluU{~S]:6Uu7luzCA=Mmw< st~M5U+4,cvFL`f;}3zi0uKKS%xsU3$c
Apr 26, 2024 06:10:50.020956039 CEST	79	IN	Data Raw: 6a 22 74 26 cf 8d 38 73 46 73 f0 3d cd 83 bd 6b 1a e6 7d 30 f2 51 f2 6f be a1 5b 23 0b fa d9 d0 ff 00 27 9d e7 d6 ce 89 f9 3c ef 3e b6 74 4f c9 e7 79 17 da 2d 64 7b 89 6c 9f a4 e3 fc ff 00 c7 0d 39 11 60 05 b3 e2 8e 1c d1 9c fc 2e f2 f5 Data Ascii: j"t&8sFs=k}0Qo[#'<>tOy-d{l9`.
Apr 26, 2024 06:10:50.021030903 CEST	1127	IN	Data Raw: bf aa ba fe c8 fc 1c 8c 74 a3 e4 32 cb 2e 65 7f 5b 3a 27 e4 f3 bc fa d9 d1 3f 27 9d e7 d6 ce 89 f9 3c ef 01 ed 4e b8 29 cc 24 81 e6 03 c7 9f e3 aa 5d 6a 96 f0 d4 54 24 a0 c7 21 3f 8f c6 e5 b0 ea 54 21 52 44 e4 8b 6c 65 cf 3f 44 c4 bf 6e 01 6d c5 Data Ascii: t2.e[:'?'<N)$]jT$!?T!RDle?Dnm"/<1!{spS}x&I4[IOssHlw)j]e%ZN0dAi}DZH=cX #ck8uqk)RWW
Apr 26, 2024 06:10:50.021071911 CEST	1289	IN	Data Raw: 58 9f ec 1d cf 5a 68 3d 4f 2f 59 8c af 01 99 bc 48 a1 f1 2c dd b6 ec 4e 6a 55 db 00 b1 21 45 46 13 f2 d8 54 a7 5e 76 89 fb 7f 58 c7 58 a4 46 64 73 b2 41 02 98 9f f9 f9 fb b9 bc 7d 6d 5b 3d fd 3e 1d 4a ce 31 6e b0 fc 21 ae 6d c9 d0 21 35 bd 90 92 Data Ascii: XZh=O/YH,NjU!EFT^vXXFdsA}m[=>J1n!m!5k1}s!B2r&Hq=D/\|;`q/BP-emH>c9+#esVPDm$F0&jB1*VSiXwKF'a
Apr 26, 2024 06:10:50.021087885 CEST	79	IN	Data Raw: d1 32 ad 49 a9 32 05 13 f3 8f f9 f9 fb b9 bc 7d 6d 5b 3d fd 3e 15 ba 8d 96 de 4b c3 41 46 be 7b cc 37 87 1d 45 8a 81 75 a9 b0 87 e6 e0 8e 05 95 ab 09 c3 bc a1 ec eb 6e be 3d b7 e3 0c 5a c6 f9 58 cb c0 52 ed 91 77 2a d0 33 b1 d9 ce 59 2d Data Ascii: 2I2}m[=>KAF{7Eun=ZXRw*3Y-
Apr 26, 2024 06:10:50.021193981 CEST	1289	IN	Data Raw: 1e 7f 23 b4 de b3 99 f8 28 9f c9 9f b3 1e 79 fb 39 ab 74 95 93 61 18 c1 24 b2 f0 10 98 57 9b c6 44 45 05 0f 1a 28 21 b2 96 05 11 94 34 cb 5d 96 f5 b5 23 ee 20 f8 67 38 c6 3c f3 9c 63 98 52 55 f7 67 19 e7 dd 9e 6b 1d ec 65 0d e4 0c 44 1c 5b c0 2d Data Ascii: #(y9ta$WDE(!4]# g8<cRUgkeD[-Xn(9 _CecODImcUqe1'! 4y.Pa^QMxCf{J99}vlu'X~&=>1m)&WyL<]%jP1#;M9
Apr 26, 2024 06:10:50.021203995 CEST	79	IN	Data Raw: 46 62 1a d7 bb e2 ef 53 ea dd a2 cc 54 c9 d2 b3 af 5a 7e 8c 8e 2c 68 ad bb 3f aa e6 b7 03 97 e9 9c e6 36 65 b0 f2 d2 37 c5 f6 db d5 1b 19 44 cd 9a cc fc 05 82 30 4f a5 62 e4 b7 ad e3 4b 5a 6c 1f c7 52 0a 85 ad 48 b6 b3 19 e8 a5 f2 d5 6a Data Ascii: FbSTZ~,h?6e7D0ObKZlRHj
Apr 26, 2024 06:10:50.021270990 CEST	1289	IN	Data Raw: 81 b5 c4 4d c9 95 22 d4 41 01 2c 35 ef 2a c4 ad e7 53 5c 20 22 93 85 1c 74 4b a8 15 bd 1b ba 4f d1 16 09 e1 a4 60 72 70 52 8d 60 49 60 34 42 fa c6 34 6c d5 e3 5e 47 be 11 f0 f0 e4 66 48 4a cc ee ca ec ad d6 63 32 db 1b 35 d4 30 13 a7 30 df 5e 77 Data Ascii: M"A,5*S\ "tKO`rpR`I`4B4l^GfHJc2500^wBSifkcv92JrDPn].]24lk]X7Hc{ZFY&#[z6^x -vu^Jqa#2Ha1`II;b8KLK)-yJA7'l/~o
Apr 26, 2024 06:10:50.021281004 CEST	79	IN	Data Raw: 29 12 f1 2e e5 d7 99 ac f5 cf 56 54 a9 53 f5 48 c8 e2 10 24 f8 d9 62 48 8a 07 5c 35 a6 b4 6a c2 dc 0b 12 08 c4 ec 7e 41 37 9a df ad 1a bb 55 cb 17 25 00 19 de 94 b8 f7 01 7d 20 f4 a7 46 c7 58 db 99 c0 72 4f b4 db d8 75 b8 ca 67 57 35 4d Data Ascii: ).VTSH$bH\5j~A7U%} FXrOugW5M
Apr 26, 2024 06:10:50.221108913 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 17218 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:22 GMT x-rgw-object-type: Normal ETag: "369512fff14fff9fdf18a74f89a016fd" x-amz-request-id: tx00000c6be2cfcc40192d5-0065dabbf9-e8f44ee-sfo1 X-Storage-Bucket: za948 X-Storage-Object: a948c0a77c5c9a6711fd0d05cfce0f7b8ba9f1ec100796a67c773cc3eef923bf Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 64 02 32 03 01 11 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 09 01 04 05 03 02 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 04 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 da 98 00 00 00 00 00 00 00 00 00 00 1f 93 5f 29 d8 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 5f b6 fa 6c 7b 3e 00 3d bc 39 e7 9d 56 db bf 4b c2 9b 3d 56 0f eb f2 01 ec 62 cd 3b ea 76 de 9d 32 41 9b 5d 4e 21 e9 f2 81 df a6 49 cf 55 b5 c8 70 e7 18 57 a7 cb 5b 77 9a 3c 6b 36 0c bf cf e9 b2 ba 3d ee 51 83 3f e4 d7 62 db 15 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 c0 81 23 f8 36 1b 56 e0 3e 81 af 1e c7 8c ae 1b dd 10 03 38 f1 fb 76 a1 c0 77 fa f2 ec f8 c8 13 71 a6 00 7b 78 73 6d 57 e7 df 42 fc 1a aa fa 17 cf 7c 7c b8 78 39 32 9f 37 a7 6c df 3c fa 2f a5 8f 26 bb 16 d8 aa b1 fc 4d 70 95 8d 9a c8 31 35 ca 26 c5 4d 7f 69 ad 49 b2 8a f2 90 00 e4 15 e6 b3 83 5a 2d da 3f 69 86 ab 39 dd eb 95 44 8e 40 00 00 00 00 03 83 56 7d f7 cf e2 9d 96 b6 72 d4 6d e4 df 07 be a0 74 dc c8 da 1f 03 df d4 be 87 9d ae 1b dd 14 93 e0 f7 d9 9d 0e fe 8f 75 bc 97 08 be 7c 87 61 03 ed f5 10 26 e3 4d 2a eb 76 56 6f 45 be a2 9d 77 23 f2 9a de 4e 4b ad ea da 29 2f 57 c9 e7 de 2f 6e cc 78 5e ef 55 3f 41 f9 ef 8d 9b 0e c9 f8 7e ea 7a d3 ee 35 d8 b6 c5 55 a8 d4 b6 bc ec 9a 2d 5f 36 2d 85 4c 59 f3 1b 45 78 a6 49 5a f4 9c 6a 88 6d 19 fd 2d 12 da 2c 19 06 4b 68 aa ea 2b 16 6f 0a f5 9d 2d 4c 1a 27 38 ac f3 6a e0 c9 bf 16 a4 d9 5b 00 00 00 00 00 1c 1a b3 ef be 7f 14 ec b5 b6 bb 9d Data Ascii: JFIF&""&0-0>>T) )/'%'/9339GDG]]}d26_)B_l{>=9VK=Vb;v2A]N!IUpW[w<k6=Q?bT#6V>8vwq{xsmWB\|\|x927l</&Mp15&MiIZ-?i9D@V}rmtu\|a&M*vVoEw#NK)/W/nx^U?A~z5U-_6-LYExIZjm-,Kh+o-L'8j[
Apr 26, 2024 06:10:51.713674068 CEST	546	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:10:51.963326931 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:51 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu140.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=43 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:10:55.309668064 CEST	596	OUT	GET /favicon.ico HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0
Apr 26, 2024 06:10:55.538275003 CEST	1266	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:55 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: keep-alive Last-Modified: Fri, 24 Sep 2021 21:48:12 GMT x-rgw-object-type: Normal ETag: "4d27526198ac873ccec96935198e0fb9" x-amz-request-id: tx000000000000001aecdb2-00628475f6-b9fbc64-sfo1 X-Storage-Bucket: z40a2 X-Storage-Object: 40a2146151863bcf46c786d596e81a308d1b0d26d74635be441e92656f29b1b4 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 3b 33 00 43 3b 34 04 44 3b 33 12 44 3c 33 18 44 3c 33 13 44 3c 36 07 41 32 22 00 50 63 82 00 00 00 00 00 00 00 00 00 4d 3e 35 00 00 0c 17 00 45 3b 34 08 44 3b 33 15 44 3b 33 19 44 3c 33 13 46 3c 35 05 45 3c 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 3f 34 00 49 44 35 02 44 3c 33 37 43 3b 33 91 43 3b 32 c6 43 3b 32 d8 43 3b 32 c9 43 3b 33 9f 44 3c 33 4c 45 3d 33 09 45 3d 32 00 44 3c 33 00 44 3d 33 0b 43 3c 32 51 43 3b 32 a4 43 3b 32 ce 43 3b 32 dc 43 3b 32 c8 44 3b 33 92 44 3b 34 36 4a 42 3b 02 47 3e 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 3b 34 00 48 3c 35 02 44 3b 33 5d 43 3b 32 e0 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ff 43 3b 32 ef 44 3c 32 83 47 3c 33 0c 47 3c 34 0e 44 3c 33 89 43 3b 32 f2 43 Data Ascii: ( @ D;3C;4D;3D<3D<3D<6A2"PcM>5E;4D;3D;3D<3F<5E<4F?4ID5D<37C;3C;2C;2C;2C;3D<3LE=3E=2D<3D=3C<2QC;2C;2C;2C;2D;3D;46JB;G>6E;4H<5D;3]C;2C;2C;2C;2C;2C;2C;2D<2G<3G<4D<3C;2C
Apr 26, 2024 06:11:01.404489994 CEST	625	OUT	GET /files/theme/images/scroll.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:01.639333010 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:01 GMT Content-Type: image/png; charset=binary Content-Length: 1837 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:58 GMT x-rgw-object-type: Normal ETag: "339a7f37eb8527f719df1ba12d2cefb1" x-amz-request-id: tx00000fb6c030772c98ab2-0065289b03-db1a051-sfo1 X-Storage-Bucket: z3a8f X-Storage-Object: 3a8fc37ed708c8e7d7dbd4d86f5b68a8b1df9ba0b651dc97d74ac7d26d307df1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 34 08 06 00 00 00 c5 78 1b eb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 39 35 34 45 33 38 33 46 33 32 33 31 31 45 33 39 41 38 31 45 33 42 43 44 38 46 30 38 30 30 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 39 35 34 45 33 38 34 46 33 32 33 31 31 45 33 39 Data Ascii: PNGIHDR44xtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:B954E383F32311E39A81E3BCD8F08007" xmpMM:DocumentID="xmp.did:B954E384F32311E39
Apr 26, 2024 06:11:11.501460075 CEST	638	OUT	GET /uploads/1/0/3/6/10363185/lucy-taylor-237x237_orig.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.735780954 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/png Content-Length: 84346 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:02:51 GMT x-rgw-object-type: Normal ETag: "402708ea4c7b568312b7516afc6e850f" x-amz-request-id: tx000003e8a7ae570ebba49-00662b295f-e9549c7-sfo1 X-Storage-Bucket: z25ac X-Storage-Object: 25aca3dc3d163c9d47b230f39dae8c4219a50e7bfa348450b9992cadb0e90d9e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ed 00 00 00 ed 08 02 00 00 00 dc 2f 65 d8 00 01 49 41 49 44 41 54 78 da ec 9d f7 77 14 67 d6 a0 bf 3f 67 cf d9 73 76 cf ec ce ec 8c 8d c3 18 27 8c 4d ce c9 80 c9 51 08 24 40 a0 2c a1 9c 33 12 ca 39 e7 96 5a a9 15 5a a1 73 0e d5 d5 d5 55 5d dd 5d b9 ba 25 b0 e7 ec 8f 7b ab 65 2b d8 23 7d 18 cc 67 9b e5 3d 8f 8b aa ae 16 c8 e8 e1 72 ef 7d 6f 89 ff 08 ae fc 6b 95 d0 8b ff bb c6 f2 f3 7f 2d af bc 58 63 e5 f9 f7 2b 2f 7e 58 23 b4 35 cb cf bf 87 f7 bf 3e c1 d0 ca 3a cb cf 37 de 82 cb 8d 77 37 7d 60 f8 d6 cb 12 7c 79 42 9b 78 c5 15 da 88 20 04 37 00 8b db 0a 9e 67 7f 47 38 8e 79 49 7e d5 07 be f4 27 c0 f1 db 2e 8e 93 de 00 bf b9 5b 79 fc c3 0a e8 bb ca af f4 18 de ff 5a fc c2 e3 d0 f2 f3 8d 77 43 9b 65 5d bf f5 3b 7b 2c be 96 c7 22 bb 15 ef 3c 7e 29 8f 57 56 be ff 25 a0 e3 d6 b2 6e ad 38 b0 d9 e3 4d b7 c2 1f f8 9b 03 46 be 12 cf 83 c1 17 5b f0 fc 25 fd 06 21 85 20 cf 4b 70 7c 10 9c e3 82 a2 08 2f fd 84 18 e4 85 35 84 a0 c8 87 44 f8 2d 5f 85 13 57 59 0e 13 e2 44 f8 e0 5f 02 ef 17 fe eb ed 7c d3 5a ff 36 8a 03 9b 3d 7e f1 4b de 7a 8f 01 f0 75 0b e0 d6 32 84 cc 2d 59 0f d2 41 50 35 2c 24 1b 86 09 8a 02 bc 14 06 4e 45 51 10 d6 00 cb c3 ba f3 a0 a6 e4 b1 b0 e6 f1 0a 1c df 02 8f b7 e7 8d 7b 1c 5a 79 f1 6f d8 d6 e3 8d ef 5c de ec 31 5c ae df fd 85 c7 f0 ca 6f cc 6b 79 bc 35 db 2c 71 0d f8 4f 08 c7 56 56 22 24 21 08 bc b0 c5 e2 21 43 08 32 10 b6 7f b4 59 14 c3 61 3a 24 21 4a be fe 5b de 79 fc da f1 f8 fb 1f fe 1d 6f 53 3c 5e de 82 d0 66 61 37 23 4a a9 44 08 10 58 20 28 d0 41 9e 0a f2 81 a0 e0 17 85 00 0f 65 99 c0 ff 08 1c 84 35 e0 82 e1 04 8a 83 a3 04 cb 8b f0 8a 18 26 08 47 b8 dc 8a 3f a9 c7 2c 4b 6f e4 f7 f1 38 f4 e2 fb e0 0f 3f 6c c5 cb 7b 0c 97 1b f9 23 79 0c be 6e b3 a4 40 bb 4e 68 fd 32 24 72 cb 3c 03 84 78 1a 08 72 fe 20 e7 13 59 af c0 e2 02 eb e5 d8 00 c7 52 61 02 3c 47 05 05 26 28 b9 ce 88 3c 23 8a 8c 20 d2 bc 40 f1 70 e4 21 72 73 ab c1 7b b5 ce 13 05 6e 0d 01 2c df c0 3b 8f b7 f7 18 96 28 8a ff b1 a6 e0 e6 78 bc 95 c7 10 92 e1 cd 2f cd 66 e7 Data Ascii: PNGIHDR/eIAIDATxwg?gsv'MQ$@,39ZZsU]]%{e+#}g=r}ok-Xc+/~X#5>:7w7}`\|yBx 7gG8yI~'.[yZwCe];{,"<~)WV%n8MF[%! Kp\|/5D-_WYD_\|Z6=~Kzu2-YAP5,$NEQ{Zyo\1\oky5,qOVV"$!!C2Ya:$!J[yoS<^fa7#JDX (Ae5&G?,Ko8?l{#yn@Nh2$r<xr YRa<G&(<# @p!rs{n,;(x/f
Apr 26, 2024 06:11:14.447647095 CEST	643	OUT	GET /uploads/1/0/3/6/10363185/pxl-20210910-232006522-5_orig.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:14.678514957 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:14 GMT Content-Type: image/jpeg Content-Length: 107393 Connection: keep-alive Last-Modified: Mon, 13 Sep 2021 00:55:57 GMT x-rgw-object-type: Normal ETag: "2453f8ec1eafcc298b1380b732ce7cc7" x-amz-request-id: tx000009b39059e0c5de46e-00662b2962-e8f4575-sfo1 X-Storage-Bucket: zdb27 X-Storage-Object: db2766550eece9913775b21ce4f796d0ac6bbf748aa5449fe126cf6e8066f67f Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 8a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 00 00 04 00 00 00 01 00 00 0d f2 01 01 00 04 00 00 00 01 00 00 09 d9 87 69 00 04 00 00 00 01 00 00 00 3e 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 02 90 03 00 02 00 00 00 14 00 00 00 5c 92 08 00 04 00 00 00 01 00 00 00 00 00 00 00 00 32 30 32 31 3a 30 39 3a 31 31 20 30 39 3a 32 30 3a 30 36 00 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 54 52 43 00 00 01 cc 00 00 00 40 67 54 52 43 00 00 01 cc 00 00 00 40 62 54 52 43 00 00 01 cc 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 03 63 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 46 42 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 Data Ascii: JFIFExifMM*i>\2021:09:11 09:20:06ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZrTRC@gTRC@bTRC@descc2textFBXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)
Apr 26, 2024 06:11:26.144284964 CEST	636	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-3.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.376491070 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 29880 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:58:22 GMT x-rgw-object-type: Normal ETag: "b36be0d65067ff41cac79a6a57bebe40" x-amz-request-id: tx000008777c26ef11f5795-00662b296e-e8f48a8-sfo1 X-Storage-Bucket: z8693 X-Storage-Object: 8693b7ce5edbb74e61224678849be8c321e2c601fd04f207f2f21a1d3900a77f Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.466644049 CEST	662	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.739384890 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 63882 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:53 GMT x-rgw-object-type: Normal ETag: "cd1007ea2a611e50f0b6bab39b7d8b41" x-amz-request-id: tx00000b29bf2b36e48c6c8-00662b296e-e8f48a8-sfo1 X-Storage-Bucket: zb647 X-Storage-Object: b647ed1fffec93b834ef7aac865ad15b3fada635f58fec743daf6cbe0f95b776 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.768214941 CEST	636	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:27.042546034 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 63468 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:04 GMT x-rgw-object-type: Normal ETag: "68dc79a220f880eab7576508e798fc57" x-amz-request-id: tx0000013a73961c0b41223-00662b296e-e8f44ee-sfo1 X-Storage-Bucket: za5d0 X-Storage-Object: a5d063c78600f8195499e6fc4ddfa07bae4bcb7fc9ce8952744ee03b45e3fef6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:40.330028057 CEST	627	OUT	GET /files/theme/images/checkbox.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:40.558453083 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:40 GMT Content-Type: image/png; charset=binary Content-Length: 1257 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "e8e61d02c59ca3f3cc4ecbf78491cc8f" x-amz-request-id: tx00000a13e7ac914e70baf-0065dadf12-e8f48a8-sfo1 X-Storage-Bucket: z695f X-Storage-Object: 695f86e322e77356cdc369934228828ddc66fcd307ab442478cd01f0e2ca2a2a Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 14 08 06 00 00 00 39 83 eb 02 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 45 45 34 45 43 45 32 46 41 35 32 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 45 45 34 45 43 45 33 46 41 35 32 31 31 45 33 41 Data Ascii: PNGIHDRB9tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:1EE4ECE2FA5211E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:1EE4ECE3FA5211E3A
Apr 26, 2024 06:11:40.973206997 CEST	625	OUT	GET /files/theme/images/header.jpg?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:41.204710960 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:41 GMT Content-Type: image/jpeg; charset=binary Content-Length: 707081 Connection: keep-alive Last-Modified: Sun, 01 Aug 2021 09:18:23 GMT x-rgw-object-type: Normal ETag: "07877cbf8a6cb923581dffe69a2b3f3c" x-amz-request-id: tx000002f6d9a314b969ac1-006578b43f-db1a051-sfo1 X-Storage-Bucket: zd28d X-Storage-Object: d28d71608819a5d2b6a6fe1727e71115b4ce4413d3420abdf49761d961ee3c14 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 32 31 20 37 39 2e 31 35 35 37 37 32 2c 20 32 30 31 34 2f 30 31 2f 31 33 2d 31 39 3a 34 34 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 43 38 34 38 32 35 45 30 36 33 34 31 31 45 35 42 39 34 38 46 38 39 36 45 42 34 42 39 34 37 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 43 38 34 38 32 35 46 30 36 33 34 31 31 45 35 42 39 34 38 46 38 39 36 45 42 34 42 39 34 Data Ascii: ExifII*Ducky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:4C84825E063411E5B948F896EB4B9473" xmpMM:DocumentID="xmp.did:4C84825F063411E5B948F896EB4B94
Apr 26, 2024 06:11:46.142441988 CEST	624	OUT	GET /files/theme/images/radio.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104705.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:46.370944977 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:46 GMT Content-Type: image/png; charset=binary Content-Length: 1503 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "bf44746166051d064f5a2db87a22c628" x-amz-request-id: tx000001e3f3ebf9b64c42d-0065da542d-e8f4575-sfo1 X-Storage-Bucket: z835a X-Storage-Object: 835adfd60e0ae3ba5027587907bb88e735c33324e484f07ea0bc9b257c2917fd Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 16 08 06 00 00 00 74 4b 4a 09 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 35 38 45 37 45 36 31 46 41 32 30 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 35 38 45 37 45 36 32 46 41 32 30 31 31 45 33 41 Data Ascii: PNGIHDRBtKJtEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:258E7E61FA2011E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:258E7E62FA2011E3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.790380955 CEST	352	OUT	GET /uploads/1/0/3/6/10363185/5533639.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:50.019746065 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 23471 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:18 GMT x-rgw-object-type: Normal ETag: "c699c1125a9efaf6a5c1c284228c071f" x-amz-request-id: tx0000036d0b39ea43ec2d6-00662b28b6-e8f48a8-sfo1 X-Storage-Bucket: z0be5 X-Storage-Object: 0be5ae8e8f1310331ffcf5569b1c64652b0f48d21d29dc45fdf224049dc7b1a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 b9 01 03 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 07 01 06 08 00 02 04 05 09 03 0a ff c4 00 59 10 00 01 03 03 02 03 05 03 06 06 0c 0a 08 07 01 00 01 02 03 04 05 06 11 00 21 07 12 31 08 13 22 41 51 14 32 61 09 15 23 42 71 91 16 33 52 81 a1 b4 17 24 25 34 38 43 62 72 92 b1 c1 d1 35 37 53 73 74 75 76 b2 b3 f0 0a 18 36 44 54 63 77 82 26 39 64 84 93 c2 e1 f1 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 11 00 02 01 02 04 03 04 06 07 07 03 05 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 14 a1 d1 15 22 32 61 71 81 06 33 43 52 53 91 b1 16 23 35 42 72 c1 f0 24 34 b2 36 44 82 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ef ab 89 43 8d 94 2c 02 92 39 48 3d 08 f4 d6 4d 67 83 44 ad 0e 2c 76 a3 f9 39 ab bc 43 ac 49 b8 b8 5c fb 5f 39 b3 21 6e c7 65 d7 83 4e 30 79 b9 8b 3b 8f 1a 49 39 4a b2 30 32 35 cf 85 8c a9 c9 a7 b1 69 7a da 90 0a a1 ff 00 58 1e 07 cf 5d 17 8a 9c 3b ac 32 a8 49 09 15 54 30 a1 b7 97 33 98 28 58 23 7f 7b 53 5b 05 4d bc d0 dc 2a 99 74 37 f4 be d4 36 fa 59 42 2b 30 65 21 23 a9 5c 72 09 f8 9c 64 1d 79 b2 c0 56 be 86 8a aa be a6 9a f0 ed 23 6d 3b 1a 9c 6c d7 a9 6c 12 e6 27 1a 94 35 f3 24 79 91 b6 35 5e e9 89 da d6 34 ed 69 9e f2 bb 4f 70 e1 9a 02 58 34 c4 d7 2a 61 18 71 71 e1 94 b2 4f 96 01 d5 d6 0a bc b7 76 2a ea c1 02 ca af 17 6e 1b da a0 69 f6 55 97 32 5a 97 80 88 90 e3 14 a4 ab a0 e6 08 f1 2b 7f 2d b5 d9 4f 05 38 bd 5d cc 1d 58 bd 82 15 9d d9 2f 8d 3c 40 b8 a9 15 8e 2b 53 25 d0 ad c4 1c c5 a6 Data Ascii: JFIFHHCCY!1"AQ2a#Bq3R$%48Cbr57Sstuv6DTcw&9d?!1AQ"2aq3CRS#5Br$46D?C,9H=MgD,v9CI\_9!neN0y;I9J025izX];2IT03(X#{S[Mt76YB+0e!#\rdyV#m;ll'5$y5^4iOpX4aqqOv*niU2Z+-O8]X/<@+S%
Apr 26, 2024 06:10:50.019756079 CEST	79	IN	Data Raw: 38 d7 b3 b4 84 7b db 83 8c 0f 5c 0c 9d 77 b8 c6 82 ba 32 f6 99 22 78 d3 32 87 63 da 36 15 85 6b aa 0d 26 b7 11 97 11 55 83 2e 60 65 89 5d d9 fa 22 ce 7f 17 e1 3e 7d 75 e3 f6 9e bd cd f2 e8 02 ed ce d7 f7 d5 8d 4b 76 98 cd 9d 03 bc 4a cf Data Ascii: 8{\w2"x2c6k&U.`e]">}uKvJ
Apr 26, 2024 06:10:50.019828081 CEST	1289	IN	Data Raw: 8c 90 5d 74 67 65 73 0e a3 5e 9b ad 51 ab a3 3d 8d e9 ed bf c4 89 2f f3 22 db 82 95 a8 e7 0b 4a b0 7d 31 b6 b3 ed 2b 81 f3 6b f6 9d ed 31 5f 98 db 74 ba 55 1a de 86 bd 91 32 73 2b ee c0 27 63 90 92 76 d5 25 39 92 a5 14 45 4e d7 55 cb f2 e0 ed 3f Data Ascii: ]tges^Q=/"J}1+k1_tU2s+'cv%9ENU?7u:8Wr$l/DCiT}szzThuO}1aeM9e9}XV>2PG8[m&MaMyX}`dOa7Hh8hYkK@5
Apr 26, 2024 06:10:50.019838095 CEST	79	IN	Data Raw: 05 0d bf 4e b7 a7 3c f1 04 d2 b6 38 b2 cb a1 b4 a9 dc 1f 42 ae 9a d2 37 40 33 53 af a8 15 18 2a 89 29 2d ca 8c ea 79 1c 69 d0 14 95 83 d4 10 72 31 ab dd 83 5e c7 0b 38 0f 53 ab 99 f2 78 57 6b 3f 31 6a ca dd f9 a9 bc a8 fa e3 00 6a ea b3 Data Ascii: N<8B7@3S*)-yir1^8SxWk?1jj
Apr 26, 2024 06:10:50.019915104 CEST	1127	IN	Data Raw: b1 16 19 f7 9f 63 6e ca fc 47 ac 37 3a b1 c3 68 74 d9 83 00 b9 47 75 50 b9 be 04 24 e0 e9 da b2 b9 4e 76 7c a2 bd 94 ac de 1e 70 1b 87 57 27 05 ec 78 94 1b 7a 8c fc 86 2b 6e 44 6c ad d7 14 e0 47 23 af 28 ee a1 e1 38 c9 d8 eb 48 cb 36 e1 2b 1c 6a Data Ascii: cnG7:htGuP$Nv\|pW'xz+nDlG#(8H6+j%IS[!^$+\{],%8H#]RLnS{Ik{jK,y'>>K(xbx:-Oq68VOQK:MIzog@VG]Y=tdzt
Apr 26, 2024 06:10:50.019956112 CEST	1289	IN	Data Raw: d7 bb 2e df 94 a9 8c a6 43 0f d1 5f 05 b5 0c 82 42 09 1f a4 6b 3a fe c9 27 0a ad 07 d3 43 62 34 26 5b 54 26 bb f5 77 6a 4f b8 0e 7a 1d 70 59 38 fa c0 90 ed ab da e9 0d b8 e1 41 59 dd 79 3b 7d be 9a f3 65 04 a4 6f 17 a0 04 be 2b 16 8a 6e 14 48 a5 Data Ascii: .C_Bk:'Cb4&[T&wjOzpY8AYy;}eo+nH<{KBhV[WWqVJu]'*O!E&du#E([(H?NBPV'Hh>X;yE-?6~5]@g+)i
Apr 26, 2024 06:10:50.019999981 CEST	79	IN	Data Raw: 39 d4 e6 88 01 3c 41 ed 3d c0 de 1b 53 9e 76 e6 e2 15 29 2f 21 24 fb 34 49 09 7d c5 63 cb c2 79 73 f6 9d 61 2a b0 5f fc 04 0f bb 7e 51 0b ae fe ab 3d 6d 76 69 e1 6d 6a f2 a8 af 28 44 f6 29 ea 7d 28 27 a1 2b c0 69 1f 9d 47 1a c9 d4 76 bd Data Ascii: 9<A=Sv)/!$4I}cysa*_~Q=mvimj(D)}('+iGv
Apr 26, 2024 06:10:50.020111084 CEST	1289	IN	Data Raw: 80 03 ac 70 0b b4 57 1a 6e b7 a6 f6 85 e2 9b b6 8b 04 02 9b 6a de 77 e7 2a b2 c1 df 90 91 f4 4c 6d d7 27 6f 8e 35 68 b9 4f 64 0d 95 9f f2 6e 70 b2 a1 c5 b8 95 13 46 a8 54 e1 45 01 2d d1 dd a9 29 e2 ea b3 92 e4 b7 b6 19 f5 4a 46 35 dc a9 fa ba 83 Data Ascii: pWnjwLm'o5hOdnpFTE-)JF54.tMOT[DHp[4?%9NRV%n.6zc ;3$(~c\W3#q.\ZBp~^)1 Xzj-}={W.*sj6c:MU6V
Apr 26, 2024 06:10:50.020118952 CEST	79	IN	Data Raw: 3a ab bb 02 e5 5f 1f bb 4b 32 4a ca 8f 52 7f a3 a3 45 6e 56 4f c7 fa 3a 9d 49 17 3f c9 3f 76 9a 91 a8 84 9f 43 f7 69 a8 d4 ac fc 0f dd a6 a3 52 b3 f0 3f 76 9a 8d 4f 99 d1 54 a8 84 9c 54 e6 64 8d bf 6d 2c e3 6c fa eb e6 6e fa 9f be 65 87 Data Ascii: :_K2JREnVO:I??vCiR?vOTTdm,lne
Apr 26, 2024 06:10:50.020186901 CEST	1289	IN	Data Raw: 42 85 4e a5 ce 3f 74 e6 75 c7 ef a5 ef bf db a5 df 52 32 c7 a1 77 ce 55 32 13 fb a7 33 7c 67 f6 d2 ff 00 bf 4b be a5 f2 47 a0 bf 39 54 89 e6 35 39 79 03 23 f6 d2 fe 1f 1d 2e fa 8c 91 e8 20 a9 54 b9 c6 6a 53 3e cf 6a 5f a9 f8 e9 77 d4 87 18 f4 17 Data Ascii: BN?tuR2wU23\|gKG9T59y#. TjS>j_w(>?.\|5FJ`RrCR R6?}/\|RR\2~QRsd~:4FX/5p*28sKlA~r,\|~_PJMFY
Apr 26, 2024 06:10:50.020250082 CEST	79	IN	Data Raw: 0e 91 83 9c 92 47 2e 26 bd 2c 35 29 55 aa ed 18 ff 00 96 1d d1 78 7f 40 9d 65 df 73 1a e2 3d 1e 2d 62 da 61 4e 2a 9b 31 95 30 2a 68 42 94 14 22 38 a5 65 d5 05 27 01 25 09 27 23 d7 57 54 d5 9d de c7 1c b1 95 63 52 97 ee 9b 8c f5 ba e5 f1 Data Ascii: G.&,5)Ux@es=-baN10hB"8e'%'#WTcR
Apr 26, 2024 06:10:50.221000910 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 23471 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:18 GMT x-rgw-object-type: Normal ETag: "c699c1125a9efaf6a5c1c284228c071f" x-amz-request-id: tx0000036d0b39ea43ec2d6-00662b28b6-e8f48a8-sfo1 X-Storage-Bucket: z0be5 X-Storage-Object: 0be5ae8e8f1310331ffcf5569b1c64652b0f48d21d29dc45fdf224049dc7b1a1 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 b9 01 03 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 07 01 06 08 00 02 04 05 09 03 0a ff c4 00 59 10 00 01 03 03 02 03 05 03 06 06 0c 0a 08 07 01 00 01 02 03 04 05 06 11 00 21 07 12 31 08 13 22 41 51 14 32 61 09 15 23 42 71 91 16 33 52 81 a1 b4 17 24 25 34 38 43 62 72 92 b1 c1 d1 35 37 53 73 74 75 76 b2 b3 f0 0a 18 36 44 54 63 77 82 26 39 64 84 93 c2 e1 f1 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 3f 11 00 02 01 02 04 03 04 06 07 07 03 05 00 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 14 a1 d1 15 22 32 61 71 81 06 33 43 52 53 91 b1 16 23 35 42 72 c1 f0 24 34 b2 36 44 82 e1 f1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ef ab 89 43 8d 94 2c 02 92 39 48 3d 08 f4 d6 4d 67 83 44 ad 0e 2c 76 a3 f9 39 ab bc 43 ac 49 b8 b8 5c fb 5f 39 b3 21 6e c7 65 d7 83 4e 30 79 b9 8b 3b 8f 1a 49 39 4a b2 30 32 35 cf 85 8c a9 c9 a7 b1 69 7a da 90 0a a1 ff 00 58 1e 07 cf 5d 17 8a 9c 3b ac 32 a8 49 09 15 54 30 a1 b7 97 33 98 28 58 23 7f 7b 53 5b 05 4d bc d0 dc 2a 99 74 37 f4 be d4 36 fa 59 42 2b 30 65 21 23 a9 5c 72 09 f8 9c 64 1d 79 b2 c0 56 be 86 8a aa be a6 9a f0 ed 23 6d 3b 1a 9c 6c d7 a9 6c 12 e6 27 1a 94 35 f3 24 79 91 b6 35 5e e9 89 da d6 34 ed 69 9e f2 bb 4f 70 e1 9a 02 58 34 c4 d7 2a 61 18 71 71 e1 94 b2 4f 96 01 d5 d6 0a bc b7 76 2a ea c1 02 ca af 17 6e 1b da a0 69 f6 55 97 32 5a 97 80 88 90 e3 14 a4 ab a0 e6 08 f1 2b 7f 2d b5 d9 4f 05 38 bd 5d cc 1d 58 bd 82 15 9d d9 2f 8d 3c 40 b8 a9 15 8e 2b 53 25 d0 ad c4 1c c5 a6 Data Ascii: JFIFHHCCY!1"AQ2a#Bq3R$%48Cbr57Sstuv6DTcw&9d?!1AQ"2aq3CRS#5Br$46D?C,9H=MgD,v9CI\_9!neN0y;I9J025izX];2IT03(X#{S[Mt76YB+0e!#\rdyV#m;ll'5$y5^4iOpX4aqqOv*niU2Z+-O8]X/<@+S%
Apr 26, 2024 06:10:51.396433115 CEST	372	OUT	GET /uploads/1/0/3/6/10363185/background-images/575468987.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:51.629581928 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:51 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000003f9fc9412830482-00662639a4-e8f44ee-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:10:54.346460104 CEST	588	OUT	GET /uploads/1/0/3/6/10363185/background-images/1797786785.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104651.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1
Apr 26, 2024 06:10:54.590543985 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:54 GMT Content-Type: image/png Content-Length: 418549 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "64ccce51a2cdfdf456b9e27fdebe61a9" x-amz-request-id: tx0000083f92161221a9bf3-00662b294e-e8f48a8-sfo1 X-Storage-Bucket: zd0ac X-Storage-Object: d0ac970277c573254a3d9e81e73e0c1385868ba193a29bce56047cd737269e81 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 15 08 06 00 00 00 73 30 cf 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 39 2f 31 31 1d d4 f1 77 00 00 ff 49 49 44 41 54 78 5e ec fd 09 d0 ad 5b 7a df 85 3d 7b 1e bf f9 cc 77 ea db b7 5b dd ad 79 b6 65 cb 58 01 13 8c 2b e0 90 0a 81 10 13 c8 48 51 09 a4 0a 9c 0a 29 12 20 0c 81 a2 80 82 14 43 c5 65 4c 61 a0 70 28 63 ec b2 00 63 84 65 cb b6 90 64 59 43 ab a7 7b fb 4e e7 de 33 9f f3 cd 7b 9e be fc 7e cf da fb 9c 73 5b 92 c1 4c ee 96 f6 fa be 77 bf eb 5d f3 7a d6 b3 d6 7a fe 6b ac 5c a1 62 ab b6 6a ab b6 6a ab b6 6a ab fe 1a 2a bb e2 ca fa fd ab 95 3d 75 05 eb 4f f6 d8 2f 7f e8 f7 85 ba ba 5a 61 bb b6 5f 7b da fc 6e ba fd f2 5e bb 41 f9 ed df 0a bf fa 49 ff eb f7 c6 ed c6 4d f9 7f d9 dc 5f e2 d4 5e ff 19 9e 69 28 6a e3 2e ff 37 7e d2 a6 7c ab af 9a 3f fe 2a 2f e5 e5 e5 3c 6b aa b6 52 a9 a6 4e 77 15 1c f8 9d 6f 5d ac df c5 5c dd da 8e c7 10 8a 5e ff f9 f5 dc 3c c3 4b f3 8d 59 b1 2f ff c5 4d 31 5e db 67 42 fc de a8 cd 47 49 ec 8b 38 36 26 45 bd ec 25 e9 90 61 ad 5d ac e3 fd f5 d5 3a d2 8d 3f 4d d2 ef da 7f aa 4f c4 b0 f1 f1 dc 49 79 59 46 1b 3f 2f b9 41 6d e8 ff c2 be 98 f9 9d 6e 9e a7 57 57 e8 c9 67 ad 5a 7b 9e df e5 d5 32 16 8b 69 2c 96 33 ca b3 5a fc ae 96 51 c5 8d 7c 95 61 67 78 1b 1e 59 87 6d b0 f9 5d cc 8d a3 a4 a1 a4 43 bf 7e ae 08 6b e3 df b0 56 c4 57 fc 2d 33 0d cb e5 82 77 49 e3 12 b7 2a df 85 17 ab f8 6f c2 a5 2d dc e9 7f 8e f9 58 df 51 ab ed 46 bd d6 c9 b0 96 8b 61 cc e6 27 31 9f cf 63 b6 ac c7 9c 67 b1 24 2e 93 46 d8 cd 46 2b 9a f5 3a 79 82 b7 8c 80 10 f1 85 fd 28 e6 8b 73 fc 4d 62 3a 6f c4 64 d6 8a e9 02 1a 10 77 ad ba 88 46 7d 15 bd 6e 3f 1a d5 3e 7e 1b 51 a9 d5 Data Ascii: PNGIHDRs0sBIT\|dsRGBgAMAapHYs+tEXtSoftwareAdobe Fireworks CS5.1HtEXtCreation Time11/29/11wIIDATx^[z={w[yeX+HQ) CeLap(ccedYC{N3{~s[Lw]zzk\bjjj=uO/Za_{n^AIM_^i(j.7~\|?/<kRNwo]\^<KY/M1^gBGI86&E%a]:?MOIyYF?/AmnWWgZ{2i,3ZQ\|agxYm]C~kVW-3wI*o-XQFa'1cg$.FF+:y(sMb:odwF}n?>~Q
Apr 26, 2024 06:11:01.403073072 CEST	625	OUT	GET /uploads/1/0/3/6/10363185/8109833.jpg?250 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:01.637217045 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:01 GMT Content-Type: image/jpeg Content-Length: 10187 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:01:10 GMT x-rgw-object-type: Normal ETag: "135e61a61184cb0ceca5447677b64d5a" x-amz-request-id: tx00000cb8bdbd467eeaa33-0065da50a2-e8f48a8-sfo1 X-Storage-Bucket: z86cc X-Storage-Object: 86cc78e492048dabf9309af79c2504ca65dc7dd5d071259060517ae4bd494de8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a6 00 fa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 06 07 04 05 08 09 0a ff c4 00 41 10 00 01 03 04 01 03 02 04 04 02 07 07 03 05 00 00 01 02 03 04 00 05 06 11 07 08 12 21 13 31 09 22 41 51 14 61 71 81 15 32 0a 16 17 23 91 a1 b1 24 42 43 52 62 c1 f0 18 34 d1 44 82 83 b2 c2 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 07 08 06 ff c4 00 33 11 00 02 02 00 04 02 08 06 02 02 03 01 00 00 00 00 00 01 02 11 03 12 21 31 41 51 04 61 71 81 91 a1 b1 f0 05 13 22 32 c1 d1 06 52 23 f1 14 42 82 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb f9 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 2a 09 1e 4e a8 09 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 82 b0 2a 5a 07 5c fe 4f 6f 8b 79 6a dc e4 e8 68 b8 be 92 b6 a2 a9 f4 07 9d 48 1b 25 28 df 71 00 79 3a 15 9c ea eb 89 69 d5 9a 0f 96 3e 28 9c 4d c4 1d 45 d9 b8 9e 64 ec 8e e5 9f df ae 08 b6 c5 b5 5b ac 32 9d 2a 75 41 2a 27 d5 52 12 d2 90 94 28 29 45 2b 56 80 3f 5f 15 2e 51 a5 95 eb c7 87 8b 0a b7 b5 f9 3c e1 d5 1f c7 7a 5f 05 f2 a7 2d 62 51 78 fb 1e b6 ce e1 fe d7 67 7f 5b f3 16 ac ef 64 0d 2f cb 5f c3 58 4b 4e 2a 42 9c 4f 6a 92 9d 83 a5 a7 60 6e b1 29 4d 5a 6d 2e 57 6e fc 11 a5 97 93 7e 06 bd eb ff 00 e2 39 cd 36 bb 5f 4e f9 fe 3f 3a fb 80 f1 07 37 db 5a 8b Data Ascii: JFIFHHCCA!1"AQaq2#$BCRb4D3!1AQaq"2R#B?@(P@(P@(P@(P@(P@(P@(NP@(P@(P@(Z\OoyjhH%(qy:i>(MEd[2uA'R()E+V?_.Q<z_-bQxg[d/_XKN*BOj`n)MZm.Wn~96_N?:7Z
Apr 26, 2024 06:11:11.504228115 CEST	621	OUT	GET /uploads/1/0/3/6/10363185/9341587.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.775659084 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/png Content-Length: 94896 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:56:11 GMT x-rgw-object-type: Normal ETag: "9eb43e2a19c291e046aa6c594eca67fc" x-amz-request-id: tx000009bc4dfaa455f521b-00662b295f-e95274c-sfo1 X-Storage-Bucket: zc436 X-Storage-Object: c4368445506602201b72d77e92fa91fc9cab918898a5c8af290d9726f687b10c Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 01 26 08 06 00 00 00 df 81 24 2f 00 00 80 00 49 44 41 54 78 da 94 fd 49 af 6d 5b 96 e7 09 fd 66 b5 d6 da c5 a9 6e f1 0a 7b cf 0a f7 08 f7 8c 8c 0c a2 a2 12 4a 01 12 a2 4d 93 0e 4d 8a 06 9f 06 f1 01 52 48 48 80 84 68 81 44 2f 85 40 d9 20 13 42 91 49 46 e1 e1 66 6e 11 e6 e6 66 af b8 c5 29 f6 de ab 98 15 8d 31 e7 5c 6b df fb 1c 91 d7 fd da 3b 77 9f bd d7 5e c5 28 ff e3 3f c6 50 7f fe df fe 1f 91 74 c6 00 06 c8 00 5a 03 80 52 a4 18 e5 c7 fa 9a d6 58 32 29 24 52 06 65 0d 29 19 48 a0 0c 64 05 a0 30 39 a2 c9 64 6d 49 59 a1 88 68 03 e4 0c 31 91 b5 5a 8f b9 fd 93 81 04 18 05 28 72 ce 68 05 46 97 8f 02 3a 83 2a 6f af ff 8d ca 90 01 43 2a 87 d0 f5 64 c8 64 32 0a a5 22 26 25 54 d6 44 ad 49 09 b4 d6 90 21 c7 88 d2 09 b4 92 2f d2 40 2c 9f 33 aa 9d 5b 8c 99 94 03 a8 8c ca 4a ee 97 ca a8 5c 6e 0f a6 1c 22 13 95 c1 00 2a 47 42 ce 28 0c 5a 69 22 a9 9c 5a 44 be 48 a1 73 c2 a8 4c 46 93 50 24 42 7d 18 a0 32 3a 67 72 56 72 ef b5 22 a9 72 af 32 28 1c 26 2a 94 c9 24 1d 89 39 a2 90 73 08 29 95 f7 28 b2 2a d7 93 ac 9c 97 4d e4 24 e7 a0 ac 81 94 e4 32 53 82 a4 48 68 b2 12 b9 20 43 24 a3 55 42 ab 8c ca 9a ac 34 e8 2c ef cf 99 04 90 35 1a 0d 4a 11 c9 64 42 39 51 39 61 b5 7d ce 4a b5 6b c8 4a a1 94 1c 4b 29 85 62 f3 ec 62 00 14 ca 18 48 59 ce 53 29 32 09 91 12 11 8e ac e4 95 28 8f 04 23 57 4d 4e 8a 98 45 ac 14 56 5e cd 9e 44 22 29 45 d6 0b 7f f8 67 ff 31 16 c5 ff 40 c1 7f 07 f8 59 86 73 11 83 72 c2 b9 29 c5 d5 6b 45 e0 55 fd ef 46 96 db cf 6a f3 b4 fe ab fc 51 aa 1d ff ea 38 ff 95 0e 53 cf 22 af e7 a7 72 f9 49 7d f2 ae fc c9 25 6e 35 4d 89 90 e7 9f fa 06 75 75 ed aa 08 da f6 e0 ea fa 8b ca cf f9 93 63 d4 cf 5f ab f7 67 77 55 7d 22 4e 57 e7 94 ab de 97 c7 53 ef 7d 11 aa ab d3 52 9b 6b 55 eb 89 e6 4f 2e 52 6d ce a1 9c b3 da 3c 0f f9 be cd 67 ca bd ca d7 b7 00 da b9 5c bf 42 d1 83 4f 4e 6f 73 1f b8 3e f6 4f 3e 5f b5 9e c1 56 66 36 cf 36 b3 9e 93 5a 6f 10 40 50 a8 07 05 ff 3c a3 fe f7 c0 a3 45 f1 df 02 fe 67 19 7e 95 c0 a3 94 6d 77 75 73 22 ed 92 8a 85 42 af 0f Data Ascii: PNGIHDR&$/IDATxIm[fn{JMMRHHhD/@ BIFfnf)1\k;w^(?PtZRX2)$Re)Hd09dmIYh1Z(rhF:oCdd2"&%TDI!/@,3[J\n"GB(Zi"ZDHsLFP$B}2:grVr"r2(&$9s)(*M$2SHh C$UB4,5JdB9Q9a}JkJK)bbHYS)2(#WMNEV^D")Eg1@Ysr)kEUFjQ8S"rI}%n5Muuc_gwU}"NWS}RkUO.Rm<g\BONos>O>_Vf66Zo@P<Eg~mwus"B
Apr 26, 2024 06:11:11.784640074 CEST	650	OUT	GET /uploads/1/0/3/6/10363185/published/portrait-dress.jpeg?1496129816 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:12.057137012 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 13174 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:38 GMT x-rgw-object-type: Normal ETag: "7a069d668246700bc8179b683c5a0d6c" x-amz-request-id: tx0000017c16618d526a83e-00662b295f-e8f44ee-sfo1 X-Storage-Bucket: z024b X-Storage-Object: 024b6dc90d2c4a73b933cf55ffe1a1e2cfd24713c49b0b6a6b33d6ce309107c6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 c4 00 00 00 88 76 75 65 64 00 00 03 4c 00 00 00 86 76 69 65 77 00 00 03 d4 00 00 00 24 6c 75 6d 69 00 00 03 f8 00 00 00 14 6d 65 61 73 00 00 04 0c 00 00 00 24 74 65 63 68 00 00 04 30 00 00 00 0c 72 54 52 43 00 00 04 3c 00 00 08 0c 67 54 52 43 00 00 04 3c 00 00 08 0c 62 54 52 43 00 00 04 3c 00 00 08 0c 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 31 39 39 38 20 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 43 6f 6d 70 61 6e 79 00 00 64 65 73 63 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 Data Ascii: JFIF,,XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmddvuedLview$lumimeas$tech0rTRC<gTRC<bTRC<textCopyright (c) 1998 Hewlett-Packard CompanydescsRGB IEC61966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.ch
Apr 26, 2024 06:11:12.158384085 CEST	641	OUT	GET /uploads/1/0/3/6/10363185/background-images/974213796.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:12.387713909 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:12 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000003f9fc9412830482-00662639a4-e8f44ee-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:26.358464956 CEST	634	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-two-page-1.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.633188963 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 42042 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:59:52 GMT x-rgw-object-type: Normal ETag: "49d6a41f7314850266535c58724544ce" x-amz-request-id: tx0000030e5bbd9b1894ed2-00662b296e-e8f48a8-sfo1 X-Storage-Bucket: z17da X-Storage-Object: 17daf1ef3e01a69dcd30da04ecec05ce333940207026ce06c7c2e1eb6bc9fc4b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.683808088 CEST	662	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-3.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.917392015 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 42893 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:00:35 GMT x-rgw-object-type: Normal ETag: "ab453727e730989896e3cc0a7614891c" x-amz-request-id: tx000001eeb7b95704f9b14-00662b296e-e95274c-sfo1 X-Storage-Bucket: za844 X-Storage-Object: a844310f8b4fcfd980a79a4477f93d6a1b0312041952749888412410442d6f41 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.850193024 CEST	356	OUT	GET /uploads/1/0/3/6/10363185/5939774.jpg?250 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en
Apr 26, 2024 06:10:50.083513021 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 10187 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:01:10 GMT x-rgw-object-type: Normal ETag: "135e61a61184cb0ceca5447677b64d5a" x-amz-request-id: tx00000cb8bdbd467eeaa33-0065da50a2-e8f48a8-sfo1 X-Storage-Bucket: z86cc X-Storage-Object: 86cc78e492048dabf9309af79c2504ca65dc7dd5d071259060517ae4bd494de8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a6 00 fa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 06 07 04 05 08 09 0a ff c4 00 41 10 00 01 03 04 01 03 02 04 04 02 07 07 03 05 00 00 01 02 03 04 00 05 06 11 07 08 12 21 13 31 09 22 41 51 14 61 71 81 15 32 0a 16 17 23 91 a1 b1 24 42 43 52 62 c1 f0 18 34 d1 44 82 83 b2 c2 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 07 08 06 ff c4 00 33 11 00 02 02 00 04 02 08 06 02 02 03 01 00 00 00 00 00 01 02 11 03 12 21 31 41 51 04 61 71 81 91 a1 b1 f0 05 13 22 32 c1 d1 06 52 23 f1 14 42 82 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb f9 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 2a 09 1e 4e a8 09 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 82 b0 2a 5a 07 5c fe 4f 6f 8b 79 6a dc e4 e8 68 b8 be 92 b6 a2 a9 f4 07 9d 48 1b 25 28 df 71 00 79 3a 15 9c ea eb 89 69 d5 9a 0f 96 3e 28 9c 4d c4 1d 45 d9 b8 9e 64 ec 8e e5 9f df ae 08 b6 c5 b5 5b ac 32 9d 2a 75 41 2a 27 d5 52 12 d2 90 94 28 29 45 2b 56 80 3f 5f 15 2e 51 a5 95 eb c7 87 8b 0a b7 b5 f9 3c e1 d5 1f c7 7a 5f 05 f2 a7 2d 62 51 78 fb 1e b6 ce e1 fe d7 67 7f 5b f3 16 ac ef 64 0d 2f cb 5f c3 58 4b 4e 2a 42 9c 4f 6a 92 9d 83 a5 a7 60 6e b1 29 4d 5a 6d 2e 57 6e fc 11 a5 97 93 7e 06 bd eb ff 00 e2 39 cd 36 bb 5f 4e f9 fe 3f 3a fb 80 f1 07 37 db 5a 8b Data Ascii: JFIFHHCCA!1"AQaq2#$BCRb4D3!1AQaq"2R#B?@(P@(P@(P@(P@(P@(P@(NP@(P@(P@(Z\OoyjhH%(qy:i>(MEd[2uA'R()E+V?_.Q<z_-bQxg[d/_XKN*BOj`n)MZm.Wn~96_N?:7Z
Apr 26, 2024 06:10:50.083549976 CEST	79	IN	Data Raw: 36 15 b9 bb 63 57 bb 5d d9 d0 54 c3 2a 9f 31 0b 8e cb 4e 05 27 fb c5 24 76 a5 b5 9f 07 c5 56 ae 2a 6d f6 ab a5 db 74 cc e6 a7 49 7b ec b3 db 9f 0f 9e 78 8b c9 dc 36 cd 82 76 4d 66 be e6 58 aa 03 37 76 18 cc a2 65 17 08 e8 52 d7 e8 b9 2e Data Ascii: 6cW]T1N'$vVmtI{x6vMfX7veR.
Apr 26, 2024 06:10:50.083688974 CEST	1289	IN	Data Raw: 4c 66 db 6f d5 58 4a b6 12 80 07 6e 86 ea c2 51 96 91 69 f6 5b 5e 2f 70 d3 e3 e7 4b d0 f4 1d 75 20 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 03 43 ed 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 4a 81 f6 3b a0 3a f9 39 1c 08 97 86 2d ee 4d 88 dc f9 29 Data Ascii: LfoXJnQi[^/pKu P@(C@(P@(J;:9-M)Rt$lt+KNa).!,~"dVwXil!K}T+ms^#-:m_iK37Q6Q{JN}\%5I:m/'s2h
Apr 26, 2024 06:10:50.083702087 CEST	79	IN	Data Raw: bb dc ed b6 d9 12 e1 c0 46 fb a7 3c db 4a 5a 19 1a f3 b5 a8 04 fe f5 c7 1a 52 8e 1c a5 05 6d 2d 0d 45 27 24 a5 b1 f1 e3 19 eb 63 2b e7 ff 00 87 7e 5f ce b7 ae ad ae 78 27 32 d8 5d 9a f4 7c 22 de fc 08 56 fb 7b cc 38 7d 0b 6a ad cb 6d 4f Data Ascii: F<JZRm-E'$c+~_x'2]\|"V{8}jmO
Apr 26, 2024 06:10:50.083827972 CEST	1289	IN	Data Raw: c8 53 a9 ed 01 6a 24 ed 7e 7f 95 42 b1 89 93 0f 0a 12 84 9c a4 ea f5 dd b7 b2 5c 28 b1 cd 39 b4 d6 54 bd db 66 7f c7 b8 ef 3e 5b 3a 96 e0 7e af ff 00 b2 fc 8e ff 00 2f 39 c1 06 3f c9 f8 ed 94 36 c5 c5 a7 13 dc 23 cb 44 47 d6 80 03 88 4c 77 7b 37 Data Ascii: Sj$~B\(9Tf>[:~/9?6#DGLw{7lW\|L4\-;}//~{_euz2l]\aC6!W74)N{C(J<%Grk5km<M7#mw.Ale>'2)'W5R+M[BO8m
Apr 26, 2024 06:10:50.083842993 CEST	79	IN	Data Raw: de d3 71 25 7e 0e 53 4a da 1c 79 6f 34 f9 6c 29 28 6c a4 a1 c4 a8 2c 8d 13 a5 6e eb 92 7d ce eb d0 34 97 8d 78 1c 8e 9b fa ca c8 3a 83 ea 8f 24 c3 24 62 d2 b1 38 f8 2e 35 15 dc 92 df 71 8e a3 2e 0d ea 44 a7 52 86 5b 7c 1f 49 f8 c6 3b 25 Data Ascii: q%~SJyo4l)(l,n}4x:$$b8.5q.DR[\|I;%
Apr 26, 2024 06:10:50.083949089 CEST	1289	IN	Data Raw: d4 3a d8 21 c4 bc 83 b4 90 a4 0b 07 71 72 5d 5f 9b fc 19 6a 9a 5e fa bf 26 2b cf 3c 2b cc 59 07 27 66 cf d9 57 78 9d 2a e9 72 b6 bf 87 5d 1b bf 86 2c d6 48 49 4b 29 99 0e 7c 05 28 07 50 b2 99 05 44 36 ea 9d 4b e9 00 b6 50 08 91 4b 8f 3d 7b 3d f9 Data Ascii: :!qr]_j^&+<+Y'fWxr],HIK)\|(PD6KPK={=i9Comd&3s,:RRB9) UFHe}\es\|,:-\`)eVR(qj]6D[=VY)-;{cm~ON}[@A
Apr 26, 2024 06:10:50.083965063 CEST	79	IN	Data Raw: 01 6c fd 41 3f 4f 7d d0 1c 77 91 bd 1d ef 67 54 06 39 9c f2 e6 33 c5 50 1f 97 91 e4 96 2b 0c 78 cd 17 9c 5d c2 73 51 82 1b 1e eb d2 d4 0e bf 3d 55 49 b0 61 f6 ce b4 f0 5c 8f 2b b2 5a ad 93 ee 97 14 5f dc 43 51 ae 4c d9 e5 0b 57 7a d2 54 Data Ascii: lA?O}wgT93P+x]sQ=UIa\+Z_CQLWzT
Apr 26, 2024 06:10:50.084036112 CEST	1289	IN	Data Raw: da 55 2d 4d a5 90 a5 f6 90 90 14 49 3a 1f 5a cd ae 60 db d1 64 a5 d6 41 1a 29 d5 50 5c 40 29 d9 1e c6 80 a9 23 5e 7e 94 00 ab 7e 36 28 0a 49 00 f9 34 05 2a 92 84 f8 a0 2b f5 42 46 f5 40 12 f6 fe 94 05 60 ee 80 82 a0 28 08 f5 45 01 c5 41 d1 1b 3e Data Ascii: U-MI:Z`dA)P\@)#^~~6(I4+BF@`(EA>^_jq@IWrM(;5T'x6]d&Gh~CJz#JR0n8vM)Gz?]2U:[GRq0i6e4Yy.}RC6Rl+jKvmu~t
Apr 26, 2024 06:10:50.084047079 CEST	79	IN	Data Raw: 5d 4b 9a f5 0c c7 04 b0 4f dc 07 3b 82 7f 6a ce 45 65 72 36 54 0f e9 1d f3 73 cb 05 eb ea 35 f5 d4 56 07 fa 26 b7 94 99 8c 82 1f f4 8a b9 5a 43 63 d6 be 7f 84 76 47 ff 00 cd 47 1a 19 8c 5f 90 bf a4 53 cc 33 64 ff 00 0a b3 64 ee c5 9c fe Data Ascii: ]KO;jEer6Ts5V&ZCcvGG_S3dd
Apr 26, 2024 06:10:50.084119081 CEST	1289	IN	Data Raw: 87 7a 1a 6b b8 6f e8 07 6f 83 af 3b 3e c2 a3 48 8a 76 2d 7f 12 ae ac ef b6 d8 f3 a3 e4 9c 81 22 3c c6 92 fb 4e b4 94 76 38 95 00 a0 a4 f8 f6 20 ec 57 85 fc 53 02 0f 2c a4 ad 75 9e b5 d1 b1 da bc ac fd 0b f7 6d 3f 7a fa 47 96 25 61 5e 0e eb 32 34 Data Ascii: zkoo;>Hv-"<Nv8 WS,um?zG%a^24T}hy%'Z;4P)BJ% {}zS+E3pe;qIQ y-nh<~rCNU&bP/w*=$ h3-lO}9
Apr 26, 2024 06:10:50.287082911 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:10:49 GMT Content-Type: image/jpeg Content-Length: 10187 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:01:10 GMT x-rgw-object-type: Normal ETag: "135e61a61184cb0ceca5447677b64d5a" x-amz-request-id: tx00000cb8bdbd467eeaa33-0065da50a2-e8f48a8-sfo1 X-Storage-Bucket: z86cc X-Storage-Object: 86cc78e492048dabf9309af79c2504ca65dc7dd5d071259060517ae4bd494de8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 a6 00 fa 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 06 07 04 05 08 09 0a ff c4 00 41 10 00 01 03 04 01 03 02 04 04 02 07 07 03 05 00 00 01 02 03 04 00 05 06 11 07 08 12 21 13 31 09 22 41 51 14 61 71 81 15 32 0a 16 17 23 91 a1 b1 24 42 43 52 62 c1 f0 18 34 d1 44 82 83 b2 c2 ff c4 00 1c 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 07 08 06 ff c4 00 33 11 00 02 02 00 04 02 08 06 02 02 03 01 00 00 00 00 00 01 02 11 03 12 21 31 41 51 04 61 71 81 91 a1 b1 f0 05 13 22 32 c1 d1 06 52 23 f1 14 42 82 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fb f9 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 08 2a 09 1e 4e a8 09 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 82 b0 2a 5a 07 5c fe 4f 6f 8b 79 6a dc e4 e8 68 b8 be 92 b6 a2 a9 f4 07 9d 48 1b 25 28 df 71 00 79 3a 15 9c ea eb 89 69 d5 9a 0f 96 3e 28 9c 4d c4 1d 45 d9 b8 9e 64 ec 8e e5 9f df ae 08 b6 c5 b5 5b ac 32 9d 2a 75 41 2a 27 d5 52 12 d2 90 94 28 29 45 2b 56 80 3f 5f 15 2e 51 a5 95 eb c7 87 8b 0a b7 b5 f9 3c e1 d5 1f c7 7a 5f 05 f2 a7 2d 62 51 78 fb 1e b6 ce e1 fe d7 67 7f 5b f3 16 ac ef 64 0d 2f cb 5f c3 58 4b 4e 2a 42 9c 4f 6a 92 9d 83 a5 a7 60 6e b1 29 4d 5a 6d 2e 57 6e fc 11 a5 97 93 7e 06 bd eb ff 00 e2 39 cd 36 bb 5f 4e f9 fe 3f 3a fb 80 f1 07 37 db 5a 8b Data Ascii: JFIFHHCCA!1"AQaq2#$BCRb4D3!1AQaq"2R#B?@(P@(P@(P@(P@(P@(P@(NP@(P@(P@(Z\OoyjhH%(qy:i>(MEd[2uA'R()E+V?_.Q<z_-bQxg[d/_XKN*BOj`n)MZm.Wn~96_N?:7Z
Apr 26, 2024 06:11:01.405940056 CEST	641	OUT	GET /uploads/1/0/3/6/10363185/background-images/360879484.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:01.642107964 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:01 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx000007fb49173d0a232c4-006628388c-e8f48a8-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:04.692158937 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104661.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:04.945316076 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:04 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu90.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=60 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:05.520564079 CEST	641	OUT	GET /uploads/1/0/3/6/10363185/background-images/359933816.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104664.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0
Apr 26, 2024 06:11:05.748759031 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:05 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx0000003f9fc9412830482-00662639a4-e8f44ee-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:07.991282940 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104664.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:08.237437010 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:08 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn145.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=49 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:08.320651054 CEST	642	OUT	GET /uploads/1/0/3/6/10363185/background-images/1922450623.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:08.550463915 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:08 GMT Content-Type: image/jpeg Content-Length: 55570 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "1e5ef37145287e5bef6885ccbcb1c804" x-amz-request-id: tx000007fb49173d0a232c4-006628388c-e8f48a8-sfo1 X-Storage-Bucket: zb664 X-Storage-Object: b6644ae3a5ace38a42f8edc5da0aef541b884a712a12f79f378c18917f8efbb6 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff c0 00 0b 08 01 15 03 e8 01 01 11 00 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 0a ff c4 00 50 10 00 01 03 03 03 02 04 04 03 05 04 08 04 03 05 09 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 61 14 22 71 81 08 32 91 15 23 42 a1 b1 52 c1 d1 f0 09 16 24 33 62 72 82 e1 43 53 92 f1 17 34 a2 18 44 73 83 c2 25 35 45 54 63 74 93 b2 d2 ff da 00 08 01 01 00 00 3f 00 fd 53 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 95 ed 9d 45 d3 17 8d 7f 7b e9 b4 09 a9 5d eb 4f c3 8b 36 73 59 03 62 1f dd b0 01 dc f0 90 49 1c 0d e9 f3 34 ce 48 48 c9 20 0f 7a f8 a7 1b 46 0a dc 4a 77 1c 0c 9c 64 d7 aa 28 a2 8a 28 a2 8a 28 a2 8a 28 a2 8a 28 af 84 e2 bc 92 6b c8 39 06 b5 5d 73 6e 79 ad 17 e4 77 e7 8a 8a 93 2f 61 3f 37 15 07 71 bf c5 8b 9f 1e 4a 5b fa 9a 5c 9b af ec 91 f8 5d c1 00 67 19 cf 15 8d 9d 65 0e 40 f1 18 94 85 a3 3d c2 ab 69 8d 53 09 e5 6d 6a 5a 09 f4 dd 53 11 6e bb 80 52 55 91 52 ac 5d 08 23 27 8a 92 66 e2 09 1c d6 fb 53 41 1f 9a b6 11 31 27 b9 ac 82 48 f5 15 f7 e2 52 3c eb e1 92 31 de bc 19 43 d6 b1 2e 67 bd 6b aa 78 07 1b 85 60 5d c1 01 58 2e 0f 4a db 93 35 09 b6 29 c2 ae df e3 4b af 5e 50 9c 9f 10 0f bd 45 c8 d4 6c 37 cf c4 27 1f f3 54 6c bd 53 1b 07 fd a1 1f ad 42 ca d5 f1 40 c7 c5 a3 3f 5a 8e 4e ae 8e b7 17 87 d3 c0 f5 af 48 d5 2c 7c 24 8c 39 bb 24 f9 f9 52 f4 fd 53 67 b6 b3 f1 32 e5 21 2e 1f ca 33 cd 41 bd d4 8b 74 a6 cc 79 0f 27 e6 fc aa dd c5 69 5a 75 0b 51 ae 65 3e 30 5a 5c e5 2a 06 94 fa a3 d4 16 62 5e a0 42 f8 d4 a0 3a bc 28 67 92 33 5e bf f8 91 6a 61 68 8f 01 f6 d6 12 06 ee 78 26 b5 2f b7 d8 37 bb 64 c5 c3 79 29 7f c3 3b 91 9a d1 9d 79 8b 0b a7 50 15 29 df 04 a9 69 0a 0b 38 e7 9a 49 6f 52 d8 de 25 22 5a 08 1e 7b ab c3 b7 3b 54 b5 06 59 90 85 2b fb Data Ascii: JFIF&&CP!1AQa"q2#BR$3brCS4Ds%5ETct?S(((((((((E{]O6sYbI4HH zFJwd(((((k9]snyw/a?7qJ[\]ge@=iSmjZSnRUR]#'fSA1'HR<1C.gkx`]X.J5)K^PEl7'TlSB@?ZNH,\|$9$RSg2!.3Aty'iZuQe>0Z\*b^B:(g3^jahx&/7dy);yP)i8IoR%"Z{;TY+
Apr 26, 2024 06:11:11.480581999 CEST	643	OUT	GET /uploads/1/0/3/6/10363185/published/dsc-0069.jpg?1561336383 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.712035894 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 9280 Connection: keep-alive Last-Modified: Mon, 24 Jun 2019 00:33:03 GMT x-rgw-object-type: Normal ETag: "28973745f066d278e135604f391f61e5" x-amz-request-id: tx00000147ff8df6958a5c8-00662b295f-e9549c7-sfo1 X-Storage-Bucket: z9fa9 X-Storage-Object: 9fa900381b14ce0aed259bd0ad54706df6fb65bbfd0cc134f3268f87cbff6df8 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 f9 00 d9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 ff c4 00 45 10 00 01 03 02 04 03 05 04 07 06 04 05 05 01 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 13 22 61 71 81 07 14 32 91 15 35 42 72 a1 b1 c1 23 24 25 33 52 d1 16 34 53 f0 43 62 73 b2 e1 17 36 54 63 93 a2 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff c4 00 25 11 00 03 00 02 03 00 02 02 02 03 01 00 00 00 00 00 00 01 02 03 11 12 21 31 04 41 13 51 14 22 32 52 61 15 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 dc 64 8c e4 3a 28 05 ba 94 72 78 ad 19 41 5f a3 9c 12 1a d0 69 ec 6c 81 62 aa 9c 6c 2f 85 d4 7d d2 ad 87 62 aa bc 6a 3f 86 4f f7 4a 0a 45 a0 2f b1 16 b1 d4 15 6e 23 be 26 70 f4 5a 1c f9 4d 5e 5b 72 59 bf b1 1c ce 86 b5 a0 1d 25 3b 2d 1e 58 9c 2a 73 58 a1 b6 9a e9 18 ab aa 3b 35 1b 5d 19 36 b0 08 6d cc 53 ea 6e a5 56 57 98 58 41 28 4c 75 06 a6 52 fe 4b 36 5b 5a fe be 93 c6 17 7c ff 00 b2 b5 f5 43 ee ee d3 35 ca 4b aa 2c ec b7 f0 4e 03 dd 26 fa 21 c4 ea fa 2e af a3 d2 d4 c9 96 d9 b4 f1 5c c1 eb db 1d 68 b9 01 f7 e6 a3 3c ba 70 5b 18 b9 b6 e8 23 5b 34 38 93 5a fd 09 3c d3 95 52 6a be 85 f3 eb 46 bd 16 2a c3 07 7b 7b 20 95 e4 cd 21 23 ed 28 54 ec 79 83 ba 6f a2 53 66 7b 64 05 cd 27 29 d5 74 ea 79 ad 30 95 bf b0 e5 36 16 d3 0e 67 0b 9b 28 75 59 61 69 69 b8 23 4d 02 3b 47 50 c7 c2 2d 6f 25 12 ae 90 3e e7 74 c5 13 2b 49 14 d7 e8 c5 f1 fc 46 5a 5e 33 a1 cb 2b 84 7d a1 2e 65 f4 2b 68 c2 f1 48 65 a2 63 89 00 db 65 89 71 f5 2b 69 f8 a6 86 fd dc d2 Data Ascii: JFIFC%# , #&'))-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("E!1AQ"aq25Br#$%3R4SCbs6Tc%!1AQ"2Ra?d:(rxA_ilbl/}bj?OJE/n#&pZM^[rY%;-XsX;5]6mSnVWXA(LuRK6[Z\|C5K,N&!.\h<p[#[48Z<RjF*{{ !#(TyoSf{d')ty06g(uYaii#M;GP-o%>t+IFZ^3+}.e+hHeceq+i
Apr 26, 2024 06:11:11.715224028 CEST	651	OUT	GET /uploads/1/0/3/6/10363185/published/gina-geffen-orig.jpg?1502688558 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.987773895 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 6375 Connection: keep-alive Last-Modified: Fri, 18 Jan 2019 00:54:22 GMT x-rgw-object-type: Normal ETag: "d09a424d28a5f05c4497ac8ff6bb8043" x-amz-request-id: tx00000745f37afdd06e87c-00662b295f-e8f44ee-sfo1 X-Storage-Bucket: zf5c3 X-Storage-Object: f5c3c0429a9d66ceadd651f9e41ba479cd1ce5f5eba9adda8430b26d23fa8153 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 0b 07 08 09 08 07 0b 09 09 09 0c 0b 0b 0d 10 1a 11 10 0f 0f 10 20 17 18 13 1a 26 22 28 28 26 22 25 24 2a 30 3d 33 2a 2d 39 2e 24 25 35 48 35 39 3f 41 44 45 44 29 33 4b 50 4a 42 4f 3d 43 44 41 ff db 00 43 01 0b 0c 0c 10 0e 10 1f 11 11 1f 41 2c 25 2c 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 ff c0 00 11 08 01 06 00 c4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 01 02 03 04 06 07 08 ff c4 00 34 10 00 01 04 01 04 01 03 04 01 02 05 04 03 00 00 00 01 00 02 03 11 04 05 12 21 31 41 06 13 51 22 32 61 71 14 23 81 33 42 52 91 a1 07 24 34 62 c1 f0 f1 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff c4 00 1f 11 01 01 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 01 11 02 03 21 31 12 04 22 32 41 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 95 20 90 0e 83 32 01 20 12 01 20 11 3c 72 96 8c 51 36 64 31 7d d2 0b f8 09 68 c6 73 a9 b2 ec 30 d2 34 f1 13 aa 30 74 11 a1 6c 79 81 ff 00 a4 c3 5c 74 f1 76 8d 2c 3b a3 a4 68 c4 2f c2 06 19 30 56 80 6b 40 35 a0 12 08 e8 33 5a 01 5a 01 5a 01 5a 02 e4 11 20 12 0c 90 44 83 22 90 65 cd cd 8f 15 84 b8 f3 f0 95 a7 80 19 9a c4 b2 b8 86 be 87 e1 4e aa 46 17 67 b7 75 72 e7 a4 16 fb d2 38 5b 9c 53 0b 20 98 34 dd 72 98 5e 32 e5 1d 70 80 d9 8d 92 f8 c8 dc ea 3d 9e 50 31 73 b5 37 bd ae 73 08 2d 68 40 3e 2e a2 d9 bf 07 e0 a0 9b 5b 23 5c 07 3c 94 f4 92 29 e9 19 30 48 04 82 24 19 90 09 00 90 09 20 b8 94 c8 ad 00 90 0a d0 0a d0 6c 99 f9 8c c6 61 e4 6f a5 36 9c 8e 47 50 cd 7c f2 90 4d 92 54 ae 40 f9 a7 2d eb b4 8d 66 23 76 9d e7 97 1e 50 1a 3d d3 bc d9 ef a0 99 2d 64 bb 07 c9 4c 93 fe 43 63 3b 9e 6e f9 40 54 ec 99 26 3b 00 da 4f 7c a0 0d b2 26 61 e1 47 1b a4 3b e4 1c d7 c2 02 dc 0c 56 6f 74 71 82 ed c7 b2 80 d6 d0 64 9e 5a 14 23 fa 47 ed 05 8d 51 ee bd ae e4 d7 34 88 58 72 ac 8c 80 48 22 41 99 00 90 09 00 92 09 17 26 45 bd Data Ascii: JFIFHHC &"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDACA,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4!1AQ"2aq#3BR$4b!1"2A? 2 <rQ6d1}hs040tly\tv,;h/0Vk@53ZZZZ D"eNFgur8[S 4r^2p=P1s7s-h@>.[#\<)0H$ lao6GP\|MT@-f#vP=-dLCc;n@T&;O\|&aG;VotqdZ#GQ4XrH"A&E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	74.115.51.7	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.914994955 CEST	721	OUT	GET /weebly/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1 Host: www.weebly.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:50.170456886 CEST	958	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:10:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: http://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false CF-Ray: 87a3b9ae698a6da3-MIA CF-Cache-Status: DYNAMIC Set-Cookie: sto-id-editor=GMHDBNAK; Domain=weebly.com; Path=/ Vary: User-Agent, Accept-Encoding X-Host: blu124.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 X-W-DC: SFO Set-Cookie: __cf_bm=J_ebyZlhPYKCG2Av.pE1QG36GeSRdjfQmSPFAa2ADp4-1714104650-1.0.1.1-BzhSYMKILBnCijARYMDlpQE2PQ9CClgDvcrqaZrsAP1bKlwelp3ysYVb1l769LQvAP24HFQclHPrAF4sbefI5w; path=/; expires=Fri, 26-Apr-24 04:40:50 GMT; domain=.weebly.com; HttpOnly; SameSite=None Server: cloudflare Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Apr 26, 2024 06:11:35.293721914 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 26, 2024 06:12:20.444293976 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:49.947691917 CEST	325	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:50.108275890 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 9677 X-GUploader-UploadID: ABPtcPrBs8-aYzyVSEOSwRym446nby7IRGpyulY4dDR8fsYGcLC0s-ZlWDGOyaTQOnNizot9xfBZIEZ7OQ Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Thu, 11 Apr 2024 05:49:28 GMT Last-Modified: Tue, 12 Feb 2019 18:19:08 GMT ETag: "6e0f7ad31bf187e0d88fc5787573ba71" x-goog-generation: 1549995548326466 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 9677 Content-Type: image/png x-goog-hash: crc32c=QhrKCw== x-goog-hash: md5=bg960xvxh+DYj8V4dXO6cQ== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:50 GMT Via: 1.1 varnish Age: 253277 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 2429 X-Timer: S1714104650.027593,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 61 08 03 00 00 00 55 9e 45 07 00 00 02 fd 50 4c 54 45 ff ff ff 1b 1b 1b 17 17 17 e8 e8 e9 df df df 1f 1f 1f e4 e4 e5 15 15 15 e1 e1 e1 e3 e3 e3 e5 e5 e6 22 22 22 fd fd fd 12 12 12 e7 e7 e7 f9 f9 fa ea ea ea ef e6 df 24 24 24 ee ee ee 26 26 26 fb fb fb f5 f5 f8 f1 e7 e1 ec ec ed ea eb f0 0e 0e 0e e7 e8 ee ed ed f2 da d9 e1 e0 e0 e7 dd dd e4 d7 d7 de f2 e8 e2 28 28 28 e2 e2 e9 de dd dd eb e4 dc f1 f2 f6 d1 d0 d8 e6 e6 ec f7 f7 f9 eb eb ec e9 e9 ef fb f8 f6 ed e5 dd db da da ec ec f2 d5 d4 dc e4 e4 eb f2 f3 f7 ee ee f4 d3 d2 da cf ce d5 dc db e3 dd dc dc f0 f0 f0 cc cb d3 39 39 39 9c 90 8e df df e6 d5 d4 ce bb b7 bd 7d 7d 7d ef f0 f5 d8 d8 d8 32 32 32 2f 2f 2f be bb c0 b3 ae b2 45 45 45 e6 e0 d8 b0 ad af 5a 36 29 a7 9f a0 6f 6f 6f d0 cf d0 cb c9 d0 c7 c4 cc c1 bd c4 a4 95 8b 9d 8b 80 5a 5a 5a f6 eb e5 cd cc cd b5 b1 b5 9b 87 7b b2 79 5b 2a 2a 2a c3 c0 c7 b6 bf bc 82 52 3c f4 f4 f4 d7 d6 d6 c9 c7 ce ad a6 a8 c9 c8 c9 c4 c6 c5 b8 Data Ascii: PNGIHDRaUEPLTE"""$$$&&&(((999}}}222///EEEZ6)oooZZZ{y[***R<
Apr 26, 2024 06:10:50.108355045 CEST	1289	IN	Data Raw: b3 b9 ac b8 b7 98 ac b0 aa a2 a5 a4 9c 9c 80 7f 7f c0 8a 6d 55 33 26 d3 d2 d3 cd d0 c9 a1 b2 b3 90 a7 ad a6 99 90 9d 8d 86 98 8a 85 49 4a 49 4b 2b 1f e4 df d7 d9 d8 d0 d1 d2 cb a1 90 86 73 46 33 f4 e9 e3 9d af b1 51 30 23 dc da d3 ca cd c7 ba c2 Data Ascii: mU3&IJIK+sF3Q0#xrqro}M8ttt^;.tVjLBBBZ@,,,~`OOO==<mB0s}s666e=-B%mNfJxJ6hdpdqUSST~aA4444zgXVBxog
Apr 26, 2024 06:10:50.108422041 CEST	1289	IN	Data Raw: 08 8f dd 13 30 bb ba 86 bb 6b c5 56 02 08 5d 18 37 a2 b2 17 aa c4 60 a6 8c 80 dc 43 5f 25 3d 3f c6 ce 43 5c 52 9c 85 98 c7 fb 26 af d7 17 c9 64 32 be a6 d5 fb 9b 63 21 ff 19 d1 23 2f 8d d1 1e 1a 68 c0 c2 f3 0e f3 f4 57 1f db ea c2 52 c7 2a 80 8e Data Ascii: 0kV]7`C_%=?C\R&d2c!#/hWR*)Ovtp@1wwZ5F7eE<Hi%$]w#h,/U`DP,((TJ&`Q(JSKkj,L'O)Y46_$Rn;;c
Apr 26, 2024 06:10:50.108438015 CEST	1289	IN	Data Raw: c6 12 66 82 20 78 65 d9 af 84 bb c2 81 a4 80 11 4a 02 82 e4 66 81 43 a6 7e 42 81 64 a8 8e b6 f5 a9 14 2a b8 95 bb 5c 86 d6 67 f4 7a 38 bc f0 94 0b 28 01 a3 bd fe 62 1c 37 54 27 a6 d7 3a c7 77 27 5d 16 ca 91 d5 11 3a da e9 76 bb 0d 16 5a a7 73 81 Data Ascii: f xeJfC~Bd*\gz8(b7T':w']:vZskQ^+~`1JTWV;Cxe\|IrLHR=S{,n'EC0e$iynfIzt1O0Yb(,I"Q^
Apr 26, 2024 06:10:50.108511925 CEST	1289	IN	Data Raw: a2 d1 a3 c5 d9 89 cd 14 24 ab 7f cc 51 8a ee 70 aa 7b 64 c4 27 39 9f 43 f9 c5 50 77 e7 41 71 f9 9a ef 72 67 f2 f2 d4 d4 f8 42 24 9c 01 0e 97 81 34 5b ad bc 93 b7 b9 b2 09 10 c6 12 37 60 7e 2b 70 e0 50 d2 b5 6c 6a 98 75 f8 bc 34 94 44 10 64 00 0a Data Ascii: $Qp{d'9CPwAqrgB$4[7`~+pPlju4DdA;apfZPCNte{QR1X'9L^Fcb1ry!_bN#iJg8c66R_k*%6+AkW8{GaV
Apr 26, 2024 06:10:50.108570099 CEST	1289	IN	Data Raw: 1f be bf ef f3 3c f7 b9 17 db 94 f1 0a 65 b2 b0 68 5c 44 e4 48 3f a2 89 e3 c3 e5 ef df 1e 72 15 d9 70 15 30 e8 8d c5 a0 96 13 13 99 41 e2 31 38 11 21 50 82 5a 6f e7 38 a2 05 8f 77 ef 58 5f 5e 5e 5f 3f a7 ff d7 8f 7b ec b5 ce 2a 6b ae 4c a5 30 ba Data Ascii: <eh\DH?rp0A18!PZo8wX_^^_?{*kL0ZRuHScRfRXB%i$?3A#r0P38TU5;~$4[GNkCp:m<YbEinseK1O25xL$S4eLcjQ.801c~xj6
Apr 26, 2024 06:10:50.108628035 CEST	1289	IN	Data Raw: 91 d7 66 8e 63 f7 56 86 c3 9d 67 50 e9 25 a9 c5 2d 95 2d 26 31 02 a2 f5 56 62 12 22 d6 09 45 62 85 c1 20 c7 42 f5 8d a7 07 36 92 1f 78 f4 92 38 a2 7d 1c 13 de 62 ba d2 40 8e 70 4c 48 b8 93 f0 85 4f 32 f7 ce 6f 03 84 b2 c2 b5 ca e4 a0 39 10 8f eb Data Ascii: fcVgP%--&1Vb"Eb B6x8}b@pLHO2o91GDwQA2G(,iuR9q%Gvn\|u%\69n9s@ll-g@(#rtWuuWncTh6WZhPmxjdov50~@?o
Apr 26, 2024 06:10:50.108644009 CEST	1289	IN	Data Raw: 05 71 76 90 08 85 8e d8 f1 03 1c c1 e7 7c da c7 f3 cb c1 d1 d0 d0 b0 6b 4e ef 92 1b 7b 7a 06 37 db aa 9c 4e 4f 8d a5 4d 06 3f f4 12 65 be b5 a6 26 1f 43 a1 48 af 55 ba 2c 65 5e 05 28 44 a2 9b b6 3a a7 81 a3 0e 09 69 67 38 04 7c 5d 11 87 af ae 58 Data Ascii: qv\|kN{z7NOM?e&CHU,e^(D:ig8\|]Xp?3QD.lH~;/^p-mD^0Qa/-U7O]VCSW@SY! h?kG4r`hGo]gjk6\%NkD$L
Apr 26, 2024 06:10:50.108685017 CEST	318	IN	Data Raw: 92 7d 17 4e 9d ba 70 e1 f7 8b c3 c3 b6 5f de f9 89 82 0e f9 02 c2 f9 31 1a 84 38 48 7c 44 48 fe 88 40 84 b1 69 0a d5 06 87 81 3d 3e ea 68 71 42 d6 e3 d8 03 c6 13 7e 8c 98 51 4a 58 50 f9 cc e1 ca 77 f6 04 c7 71 f8 e8 f9 f3 88 fa f9 a3 0f be f1 f6 Data Ascii: }Np_18H\|DH@i=>hqB~QJXPwq~CL}$1hD_ @:5<0qwr@:/+kfpP[UY^]Y:UY@fNd9'E5%&@0Mc6M{<;)4Fs
Apr 26, 2024 06:10:52.335675001 CEST	312	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:52.497514963 CEST	1289	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 1488 X-GUploader-UploadID: ABPtcPrZvm6VLwtsUOSQMA8nbynKNceOpLp0vg5AByS6nH1QO7mlGooqLkPAq2pmDTB2Qg-8R-c9LHqTww Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Sat, 27 Apr 2024 06:04:10 GMT Last-Modified: Wed, 10 Oct 2018 21:37:00 GMT ETag: "bc61dcb431a14c508075eeff4f74523a" x-goog-generation: 1539207420450301 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 3507 Content-Type: image/svg+xml x-goog-hash: crc32c=vgUlyw== x-goog-hash: md5=vGHctDGhTFCAde7/T3RSOg== x-goog-storage-class: STANDARD Server: UploadServer Content-Encoding: gzip Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:10:52 GMT Via: 1.1 varnish Age: 166001 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 1111 X-Timer: S1714104652.415578,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 57 4d 6f 1b 37 10 bd e7 57 6c b7 97 04 90 28 72 86 c3 e1 04 96 03 44 40 7b 71 80 02 69 2f b9 39 d6 46 12 62 4b 86 ac c6 ce bf ef e3 4a 86 c9 54 f6 25 bb 6f 47 f3 f1 e6 cd 90 b9 f8 f0 74 77 db fd 18 f6 0f 9b dd 76 de 07 e7 fb 6e d8 de ec 96 9b ed 6a de ff f3 f7 1f d3 dc 7f b8 7c 73 f1 f0 63 d5 3d 6e 96 87 35 6c 3c df 3f f5 dd 7a d8 ac d6 87 79 cf a1 bc fd d8 0c 8f 1f 77 4f f3 de 77 be 83 45 c7 a1 af dd e2 0d 81 b6 0f f3 7e 7d 38 dc bf 9f cd 1e 1f 1f dd 23 bb dd 7e 35 23 ef fd 0c 01 4e 26 ef 9f 6e 37 db ef e7 0c 83 99 cd c6 af fd e5 9b 0e 7f 17 bf 4d a7 dd 9f c3 76 d8 5f 1f 76 fb f7 dd e7 ef c3 e1 66 dd 09 b9 d0 bd 4d ea 63 7e d7 4d bb ca d1 d7 dd 7a b8 db 5c 9f 0a 74 37 bb bb d9 c3 f1 37 d3 e9 c9 e5 61 73 b8 1d 2e af 76 ab dd e1 e7 fd d0 45 7f ff d4 2d 76 f7 3f 2f 66 c7 2f 47 ab e5 f0 70 73 b9 d8 0f d7 87 61 09 Data Ascii: uWMo7Wl(rD@{qi/9FbKJT%oGtwvnj\|sc=n5l<?zywOwE~}8#~5#N&n7Mv_vfMc~Mz\t77as.vE-v?/f/Gpsa
Apr 26, 2024 06:10:52.497531891 CEST	1203	IN	Data Raw: 62 0e eb 53 6c 77 31 1b 3f 1d ad 56 dd 66 39 ef ff ba 5e 0d 53 10 f0 70 d8 ef be 0f f3 7e bb db 0e cf 6f d3 67 52 fb ee db e6 f6 f6 f9 63 79 9e ee ff bd 85 f5 f0 63 d8 ee 96 cb 53 c5 95 db e7 14 fb ee b0 bf de 3e 7c db ed ef e6 fd f8 78 8b ac de Data Ascii: bSlw1?Vf9^Sp~ogRcycS>\|xNscRJ:J:zM)SK1pw$$"d!p86IbjPq!MpQ}8($xY(PW%.0EYY&SV):D)[v/wY-
Apr 26, 2024 06:11:01.399861097 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:01.560367107 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:01 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253288 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 2430 X-Timer: S1714104661.479599,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:11.573020935 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:11.733042002 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:11 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166021 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 1112 X-Timer: S1714104672.652558,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:17.439639091 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:17.599755049 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:17 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253304 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 2431 X-Timer: S1714104678.519260,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:17.907524109 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:18.068906069 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:17 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166027 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 1113 X-Timer: S1714104678.988333,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:21.952431917 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:22.112826109 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:22 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253309 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 2432 X-Timer: S1714104682.032321,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:23.267514944 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:23.427580118 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:23 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166032 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 1114 X-Timer: S1714104683.347082,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.973433018 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:26.133583069 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:26 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253313 X-Served-By: cache-pdk-kfty2130025-PDK X-Cache: HIT X-Cache-Hits: 2433 X-Timer: S1714104686.053073,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:12:11.148067951 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	162.159.140.60	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:50.820856094 CEST	723	OUT	GET /ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1 Host: www.editmysite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:51.000910997 CEST	996	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 04:10:50 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 26 Apr 2024 05:10:50 GMT Location: https://www.editmysite.com/ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false Set-Cookie: __cf_bm=T6ro4_JA.vecqxXc1ZyRy6nWFtr5B8Jcze4i.hz0ANA-1714104650-1.0.1.1-5vFDxllsSuYAeJYWvXLQdlqX7kQHSefd9.zfbYUAybIqvXiWmSzre5E947E2qcasEQNFmbG_oY.IFfP8xKg8Wg; path=/; expires=Fri, 26-Apr-24 04:40:50 GMT; domain=.editmysite.com; HttpOnly; SameSite=None Vary: Accept-Encoding Server: cloudflare CF-RAY: 87a3b9b418708daf-MIA Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Apr 26, 2024 06:11:36.008436918 CEST	6	OUT	Data Raw: 00 Data Ascii:
Apr 26, 2024 06:12:21.163589001 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49774	35.85.25.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:52.056860924 CEST	507	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: http://www.painrehabilitation.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:52.292571068 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:52 GMT Content-Length: 0 Connection: keep-alive Server: nginx Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, SP-Anonymous Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=31536000; includeSubDomains
Apr 26, 2024 06:11:37.389875889 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49776	35.85.25.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:52.728070021 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1959 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:52.728095055 CEST	1959	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/contact.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","t
Apr 26, 2024 06:10:52.962750912 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:52 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=c21eb51d-465c-4a50-b64e-5222562df29d; Expires=Sat, 26 Apr 2025 04:10:52 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:01.269268990 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 1991 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:01.269324064 CEST	1991	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"Europe/B
Apr 26, 2024 06:11:01.505253077 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:01 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=48c40089-bdec-424c-8f7f-0affc5ac48af; Expires=Sat, 26 Apr 2025 04:11:01 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:04.645236015 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2004 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:04.645236015 CEST	2004	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/about-us.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","
Apr 26, 2024 06:11:04.883399010 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:04 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=52756347-31a5-4df9-84e0-6831279106e5; Expires=Sat, 26 Apr 2025 04:11:04 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:07.713730097 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2013 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:07.713768959 CEST	2013	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/about-the-program.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p
Apr 26, 2024 06:11:07.949687958 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:07 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=fc1840d3-4ec8-4bee-969f-d6785abae242; Expires=Sat, 26 Apr 2025 04:11:07 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:11.390669107 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2016 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:11.390733004 CEST	2016	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/health-professionals.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn"
Apr 26, 2024 06:11:11.626337051 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=f4fe3722-3450-44cc-8131-84ec8c4a994e; Expires=Sat, 26 Apr 2025 04:11:11 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:17.749706030 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2004 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:17.749986887 CEST	2004	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/research.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","
Apr 26, 2024 06:11:17.988291979 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:17 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=548fe5ae-3bb2-4b6d-a7a6-f3f35ce63a09; Expires=Sat, 26 Apr 2025 04:11:17 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:22.687917948 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2008 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:22.687963009 CEST	2008	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/our-partners.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"we
Apr 26, 2024 06:11:22.928220987 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:22 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=eedbbdc8-aaeb-4542-bfb7-5916e367ddbd; Expires=Sat, 26 Apr 2025 04:11:22 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:26.306998968 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2027 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:26.307059050 CEST	2027	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/blog","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web","tz":"Euro
Apr 26, 2024 06:11:26.546125889 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=59156a17-2516-4d29-9e04-61ee619781d1; Expires=Sat, 26 Apr 2025 04:11:26 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:40.130654097 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2005 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:40.130673885 CEST	2005	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/referrals.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"web",
Apr 26, 2024 06:11:40.365787983 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:40 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=7d353640-2256-4947-abbf-3cdedf23ad45; Expires=Sat, 26 Apr 2025 04:11:40 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok
Apr 26, 2024 06:11:46.050458908 CEST	468	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive Content-Length: 2009 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Accept: / Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:46.050491095 CEST	2009	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 33 22 2c 22 64 61 74 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-3","data":[{"e":"pv","url":"http://www.painrehabilitation.com.au/questionnaire.html","page":"10363185:531655877943443302","tv":"js-2.6.2","tna":"_wn","aid":"_wn","p":"w
Apr 26, 2024 06:11:46.285696983 CEST	419	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:46 GMT Content-Length: 2 Connection: keep-alive Server: nginx Set-Cookie: sp=24e41b67-1977-4c6b-bc4a-b0e7fba58e1e; Expires=Sat, 26 Apr 2025 04:11:46 GMT; Domain=; Path=/; SameSite=None; Secure Access-Control-Allow-Origin: http://www.painrehabilitation.com.au Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49789	54.200.77.207	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:10:54.716156960 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:10:54.949702978 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:54 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=ac5e9b1f-e931-4921-b3ac-3518cfe9f83c; Expires=Sat, 26 Apr 2025 04:10:54 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:01.702845097 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:01.938050985 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:01 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=6cc155d0-5269-4d97-bbba-eb79c6dcb860; Expires=Sat, 26 Apr 2025 04:11:01 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:04.890057087 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:05.127753973 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:05 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=b8322fde-fb46-4696-916f-a43f2b001101; Expires=Sat, 26 Apr 2025 04:11:05 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:07.994101048 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:08.230515003 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:08 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=f2740654-6b87-4cc5-bd89-23de5eda7636; Expires=Sat, 26 Apr 2025 04:11:08 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:11.633181095 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:11.871404886 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=ef9f1ca0-ddac-4e0c-ba70-ccc90dbde794; Expires=Sat, 26 Apr 2025 04:11:11 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:17.995184898 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:18.231288910 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:18 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=bad5295f-50e4-4a3d-b0a6-1a08e853f41c; Expires=Sat, 26 Apr 2025 04:11:18 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:23.266541958 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:23.503914118 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:23 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=440cb8a2-1d6b-4ee1-8ed4-5b53a04964f0; Expires=Sat, 26 Apr 2025 04:11:23 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:26.549722910 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:26.785146952 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=b3207ea6-69eb-49d8-84bc-47090372c3e0; Expires=Sat, 26 Apr 2025 04:11:26 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:40.500981092 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:40.739411116 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:40 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=f4eda31d-a3c0-4ae9-a7d1-0d96d9b55947; Expires=Sat, 26 Apr 2025 04:11:40 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Apr 26, 2024 06:11:46.290790081 CEST	304	OUT	GET /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: ec.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:46.525579929 CEST	503	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:46 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Server: nginx Set-Cookie: sp=5075496d-2342-4eaa-bbfe-7d58ffb94343; Expires=Sat, 26 Apr 2025 04:11:46 GMT; Domain=; Path=/; SameSite=None; Secure Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:01.484426022 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.0.1714104654.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104660.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:01.733562946 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:01 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu65.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=40 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:01.936552048 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:01 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu65.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=40 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:11.487674952 CEST	651	OUT	GET /uploads/1/0/3/6/10363185/published/ben-photo-2-orig.jpg?1613521616 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.794662952 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 6356 Connection: keep-alive Last-Modified: Wed, 17 Feb 2021 00:26:56 GMT x-rgw-object-type: Normal ETag: "24aebb4ba7b4c5da41b007727013d4d9" x-amz-request-id: tx000007d39b3cdb9b22c3d-00662b295f-e8f4575-sfo1 X-Storage-Bucket: z93ce X-Storage-Object: 93ceb9096c4f61b2a34018171d48229f18dd3231ca90c5324bd3e20cb36664ce Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 e0 00 d9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 04 06 03 05 07 08 ff c4 00 42 10 00 01 03 02 04 04 03 05 05 07 03 01 09 00 00 00 01 00 02 03 04 11 05 12 21 31 06 41 51 61 07 13 22 14 71 81 91 a1 23 32 42 52 b1 08 15 16 33 62 c1 d1 72 92 e1 43 17 53 55 63 94 a2 c2 f0 f1 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff c4 00 25 11 00 02 02 02 02 03 00 02 02 03 00 00 00 00 00 00 00 01 02 11 03 21 12 31 04 13 41 22 32 23 51 33 42 61 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ee 1b 25 af 54 7b 24 b8 0d c1 6e e9 5b a2 5d 52 b2 00 fb d1 ba 16 29 72 40 10 7a 59 2b f5 40 0d 51 3d 90 20 ee 90 29 04 87 34 24 37 b9 4b 44 ad ae c9 00 80 40 20 74 46 d6 d9 24 00 42 fa 23 6d 10 b2 01 72 dd 04 8d f9 25 aa 01 a9 5d 1b 21 6d 0a 00 5d 00 88 4a c8 01 a5 d2 48 04 82 01 14 08 d1 14 87 b9 00 b4 b2 56 1d 92 b2 59 42 12 65 e4 90 04 a7 58 5a e9 2b 51 51 a0 14 ac 9c 2f aa 44 68 a0 0d 49 38 0e a9 00 80 00 24 13 80 44 04 03 6c 9c 02 29 00 84 83 6b a4 9c 42 40 74 42 2c 60 08 da c9 d6 48 a8 b1 63 2d a2 56 4e 40 a1 23 48 4d 4f 4d 21 00 db 21 6d 13 ac 95 b4 d5 00 db 25 61 c9 38 8d 13 6d a2 00 59 0b 6a 9e 81 1d 50 01 04 eb 5d 2b 20 1a 53 6c 9f d5 35 01 9c 23 c9 11 a8 47 92 b1 00 03 44 00 44 68 11 e6 75 40 04 80 f7 a2 02 21 40 02 21 10 8a 00 5b 6b 24 02 36 55 ee 32 e3 0c 27 84 30 b7 d6 e2 d3 3a da 86 43 10 cd 24 8e e8 07 2f 79 b0 40 6d 71 5c 46 0c 32 86 4a aa 92 ec 8c b3 43 5b ab 9e e2 72 b5 a0 75 24 81 f1 52 60 73 dd 0b 5d 34 62 27 91 ab 33 07 65 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("B!1AQa"q#2BR3brCSUc%!1A"2#Q3Ba?%T{$n[]R)r@zY+@Q= )4$7KD@ tF$B#mr%]!m]JHVYBeXZ+QQ/DhI8$Dl)kB@tB,`Hc-VN@#HMOM!!m%a8mYjP]+ Sl5#GDDhu@!@![k$6U2'0:C$/y@mq\F2JC[ru$R`s]4b'3e
Apr 26, 2024 06:11:11.794713020 CEST	79	IN	Data Raw: 3d 2e 37 5e 4e f1 07 c5 8c 4f 1f a9 84 e1 a6 af 0b a1 15 2c a8 6b 3c d6 bd c0 b0 68 e0 6d 71 ea d6 db 29 d8 df 8d 75 d5 58 53 69 85 45 4e cd 70 a8 6b 5b 04 8c 95 a4 10 46 52 e0 f6 5f 76 90 3b 93 cb 4f 5b a2 2d 1e 9b ae af 82 8a 39 1d 29 Data Ascii: =.7^NO,k<hmq)uXSiENpk[FR_v;O[-9)
Apr 26, 2024 06:11:12.019473076 CEST	1289	IN	Data Raw: 73 de c8 a4 98 46 c1 99 ef 6b 05 dd 94 73 3f e5 6a 78 27 89 e9 38 bf 02 8f 17 c3 c1 65 34 af 73 58 c7 9f 5b 72 9b 1c c3 91 ed ae e1 79 78 f8 bd c4 1f c4 af c6 7c ba 39 6a cd 2b 69 18 d7 c4 4b 22 68 70 71 2c 68 76 84 9d 49 bf 65 03 0a f1 1f 1b c2 Data Ascii: sFks?jx'8e4sX[ryx\|9j+iK"hpq,hvIe1:h)\\|~9%')#R_AcW<hB42{ZZ;%3&1?&o6Ni$J;R) liVI
Apr 26, 2024 06:11:12.019496918 CEST	79	IN	Data Raw: fa 9d 7e 0f ee 5c 21 b8 bf d6 e5 3e 67 03 cc ac 37 68 01 cf 70 6f bc d9 67 63 a0 70 d2 46 1f 8a f3 d5 9e c7 24 46 2e 61 be ba fe 89 92 d8 c6 6d fa a9 13 32 31 a8 73 75 41 f1 b3 c9 1a 85 a5 31 a3 5c 18 5a 77 b1 51 ea 58 5c 02 9d 53 55 4b Data Ascii: ~\!>g7hpogcpF$F.am21suA1\ZwQX\SUK
Apr 26, 2024 06:11:12.019582987 CEST	1289	IN	Data Raw: 04 45 f2 c8 d6 b4 6a 49 55 6a de 2f c3 23 91 cc 89 ce 90 8e 79 74 4e 0d f4 65 39 c6 3d 92 27 07 62 34 54 9f 10 a9 b2 d3 45 33 47 f4 92 ac 3f bf fc e3 99 b4 ee 7c 67 f2 82 b0 e3 10 b7 15 c1 2a 63 65 ee 58 4b 6e 2c 43 86 ab 4c 77 17 b3 93 2b 53 8b Data Ascii: EjIUj/#ytNe9='b4TE3G?\|g*ceXKn,CLw+SH0Uyx-J8{nt]\|yd{zX~v/J $qdof` @$B!&n7J+%D/A%St)2WUc\s;9n.uYN;@j`0{uZ
Apr 26, 2024 06:11:12.243551016 CEST	79	IN	Data Raw: 4e 73 9c 77 2e 37 25 6c c5 3d 74 81 ac a2 c1 9f 00 76 cf 94 ef a5 d5 7b 88 65 c5 69 66 8a 9a 0f 23 da a4 b1 2d cb 70 c6 f5 2a ca 36 63 29 a5 f6 d9 9e 5a 60 e7 bc 45 26 40 e3 c8 d8 83 d4 2d 86 1b 24 a6 8d 82 6b 17 b4 e5 36 ea 34 51 e8 e8 Data Ascii: Nsw.7%l=tv{eif#-p*6c)Z`E&@-$k64Q
Apr 26, 2024 06:11:12.243803978 CEST	1289	IN	Data Raw: 64 31 c4 da a9 73 49 a3 9e 5a db 0d 14 b8 3e ce 92 32 47 de 25 c7 e2 49 54 65 5d d1 d6 b8 06 9a 26 60 10 d4 35 80 4d 31 71 7b f9 9b 38 80 3d ca ce d5 a8 e1 6a 67 52 60 14 10 c8 2c f1 10 2e 1d 09 d4 fe ab 6e 0a e9 4a 91 e4 cd dc 9b 0a 49 24 a2 8a Data Ascii: d1sIZ>2G%ITe]&`5M1q{8=jgR`,.nJI$r@$[%RI)V:&HyFCk#wu&RtBHwZ]-[TDSi6"+oYd{dzSx*rH>b+dh,=4
Apr 26, 2024 06:11:12.243899107 CEST	79	IN	Data Raw: 3b ff 00 92 f2 fb de 5d a7 20 bb cf ec c1 88 08 60 c6 69 09 d4 4a c9 80 eb 76 d8 ac b3 2b 89 b6 1d 48 eb 9c 71 c2 f2 63 8c 15 74 41 91 e3 11 36 c4 38 d9 b5 4d 1f 84 9e 4e 1c 8a e4 55 6c 78 7c 90 4d 1b e1 a8 8d d9 64 8a 41 67 30 f4 21 7a Data Ascii: ;] `iJv+HqctA68MNUlx\|MdAg0!z
Apr 26, 2024 06:11:12.287050962 CEST	1289	IN	Data Raw: 56 9b c9 c4 21 01 ee b4 8d 17 04 6e 7b ad 17 17 f0 3d 27 10 41 79 ae da b6 0b 47 55 1e 8f 6f 63 d4 76 2b cb cb 83 9e d7 67 a9 83 ca f5 fe 32 e8 f3 7d 6c 60 de ea b9 5d 44 c7 38 92 01 f7 ab ee 3d c3 98 a5 0e 25 3d 06 58 ab 26 88 d9 c6 9d e0 b8 74 Data Ascii: V!n{='AyGUocv+g2}l`]D8=%=X&tn4T$.;FQ>44,jtpX(p~#3ax?)%+dn1/ 4H9[}ydsZ[Z,my"frZ:8i?/7&#5
Apr 26, 2024 06:11:12.287092924 CEST	79	IN	Data Raw: 4a 27 b4 79 37 71 a2 9b c1 f4 7e df c6 18 45 33 9a 0b 24 aa 66 61 d8 1b 9f d1 6b e3 37 73 9a eb 9e e3 45 27 03 c4 1f 81 63 b4 18 9c 00 97 53 ca d7 91 7f bc df c4 df 88 b8 56 7d 14 3d 63 25 33 25 a7 f2 a4 68 73 5e 2c 45 b9 2a 5f 1e 61 51 Data Ascii: J'y7q~E3$fak7sE'cSV}=c%3%hs^,E*_aQ
Apr 26, 2024 06:11:12.467536926 CEST	129	IN	Data Raw: e1 dc 19 89 47 13 9c e6 b6 07 e5 bf 21 d3 ea af 74 55 11 56 53 43 53 4c e0 e8 26 63 64 8d c3 9b 48 b8 fa 2a af 8a 67 2f 08 62 5d e1 70 50 bb 24 f3 73 b4 41 ae 1a 8b a3 2e f6 4d b0 3b ae a3 9d 0f 02 e2 fd 53 06 af 37 e4 9c de e6 f6 58 da eb b9 c7 Data Ascii: G!tUVSCSL&cdH*g/b]pP$sA.M;S7Xf} G%JL1}=JnC%#
Apr 26, 2024 06:11:14.449839115 CEST	625	OUT	GET /uploads/1/0/3/6/10363185/savita_orig.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:14.682948112 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:14 GMT Content-Type: image/png Content-Length: 165660 Connection: keep-alive Last-Modified: Wed, 09 Feb 2022 03:22:52 GMT x-rgw-object-type: Normal ETag: "7547236310eabef905f40eed8a1a5997" x-amz-request-id: tx00000ca38e36d10d5e46c-00662b2962-e8f44ee-sfo1 X-Storage-Bucket: zd813 X-Storage-Object: d81371654521767e6ba8a9739633a1897d401e6982378a689c403e02b3e31240 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 91 00 00 01 83 08 06 00 00 00 ea 3f 2d c7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 80 00 49 44 41 54 78 da ec fd 57 b0 2d 59 9a df 87 fd 96 c9 cc ed 8f b9 de 95 6f 5f 5d 33 3d d3 63 1a 63 30 c0 0c 06 9e 00 04 82 22 00 99 50 30 48 86 42 4f 7a 91 5e e4 42 62 c8 86 a4 90 5e c1 08 52 12 48 40 14 49 80 e2 00 a3 81 9b e1 4c f7 f4 58 b4 ef e9 2e d7 55 75 6f 5d 7f cf 39 fb 6c 9f 99 6b 2d 3d ac 5c b9 33 73 ef 7d cc 35 65 ba cf 77 63 c7 b9 db 64 e6 ca 95 99 eb 73 ff ef ff 89 ff df 3f fb 75 47 43 84 14 8d 4f 2c a7 11 21 c4 31 df cb da 7b e9 38 fa f7 a7 3a fa 93 8f ef 4c 8e 16 e7 dc 93 ef a4 ba 3f 5b bf bf 9a fb 0f d7 ab f9 79 78 7f dc 78 ec 31 df af db de 59 8b 31 a6 d8 d6 d6 ee 99 95 df 3b b3 32 de f9 7c ce 78 3c 66 3e 9f 93 cd 67 84 5b 5e 4a 89 10 02 21 54 f9 7b a9 ec ca f6 9b de 87 63 4b 29 d1 5a a3 94 42 09 81 94 aa fc 9d df bf 40 29 7f 0c 81 46 08 81 2c 3e 77 ce d5 7e eb 9c 58 7b 5c 27 fd a0 a5 50 6b 9f 99 30 16 6b c3 98 d6 8f db 14 bf 0b eb 4a f8 5c 86 7d ba fa 7a b0 b2 fe 34 be 77 ce 61 ac 2d 8f af 54 44 ab dd 02 2c b3 d9 8c f1 78 8c 31 06 b0 58 e7 6a d7 df 39 4b 9e 3b da 9d 36 fd 7e 9f 6e a7 8b 8a 62 a4 54 95 23 2c 8f 57 bd 56 72 c3 75 59 b9 5e 52 ae fd dd a6 f7 4d 91 a7 5c 9f 56 ae 5b e3 fe b4 6b 9e 1b 6b 0c b9 31 58 6b 99 cf 66 38 e7 88 e3 98 4e b7 4b a4 f5 89 d7 48 e7 1c fa 54 a3 dd 28 4d 25 73 dc 00 24 67 72 26 3f 2a 22 d5 ea 62 e3 9c a9 29 92 d3 48 50 12 cb 45 ec 98 e7 49 18 10 02 27 04 08 81 40 d5 b6 dd b4 7d 53 29 2d c7 fe 74 8d 88 c7 3d ff a0 0c c5 8a f2 92 80 d9 b0 ad 44 c8 d3 19 c5 3f 2a d2 bc af 4e 2a 67 ab f9 99 9c c9 99 1c 21 cf 78 89 70 f2 b1 be 97 8f b1 d8 9d c9 b3 91 c7 f2 44 56 2f de d1 ee dc 8a 7c b8 86 cc 99 7c c8 d2 0c 5f Data Ascii: PNGIHDR?-gAMAa cHRMz&u0`:pQ<bKGDpHYsodorNTwIDATxW-Yo_]3=cc0"P0HBOz^Bb^RH@ILX.Uuo]9lk-=\3s}5ewcds?uGCO,!1{8:L?[yxx1Y1;2\|x<f>g[^J!T{cK)ZB@)F,>w~X{\'Pk0kJ\}z4wa-TD,x1Xj9K;6~nbT#,WVruY^RM\V[kk1Xkf8NKHT(M%s$gr&?"b)HPEI'@}S)-t=D?N*g!xpDV/\|\|_
Apr 26, 2024 06:11:17.960880995 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:18.210350990 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:18 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu125.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=61 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:18.647418976 CEST	641	OUT	GET /uploads/1/0/3/6/10363185/background-images/869984522.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Apr 26, 2024 06:11:18.879410982 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:18 GMT Content-Type: image/png Content-Length: 418549 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "64ccce51a2cdfdf456b9e27fdebe61a9" x-amz-request-id: tx00000ae211d21477d4ffc-0066289292-e8f4575-sfo1 X-Storage-Bucket: zd0ac X-Storage-Object: d0ac970277c573254a3d9e81e73e0c1385868ba193a29bce56047cd737269e81 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 15 08 06 00 00 00 73 30 cf 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 39 2f 31 31 1d d4 f1 77 00 00 ff 49 49 44 41 54 78 5e ec fd 09 d0 ad 5b 7a df 85 3d 7b 1e bf f9 cc 77 ea db b7 5b dd ad 79 b6 65 cb 58 01 13 8c 2b e0 90 0a 81 10 13 c8 48 51 09 a4 0a 9c 0a 29 12 20 0c 81 a2 80 82 14 43 c5 65 4c 61 a0 70 28 63 ec b2 00 63 84 65 cb b6 90 64 59 43 ab a7 7b fb 4e e7 de 33 9f f3 cd 7b 9e be fc 7e cf da fb 9c 73 5b 92 c1 4c ee 96 f6 fa be 77 bf eb 5d f3 7a d6 b3 d6 7a fe 6b ac 5c a1 62 ab b6 6a ab b6 6a ab b6 6a ab fe 1a 2a bb e2 ca fa fd ab 95 3d 75 05 eb 4f f6 d8 2f 7f e8 f7 85 ba ba 5a 61 bb b6 5f 7b da fc 6e ba fd f2 5e bb 41 f9 ed df 0a bf fa 49 ff eb f7 c6 ed c6 4d f9 7f d9 dc 5f e2 d4 5e ff 19 9e 69 28 6a e3 2e ff 37 7e d2 a6 7c ab af 9a 3f fe 2a 2f e5 e5 e5 3c 6b aa b6 52 a9 a6 4e 77 15 1c f8 9d 6f 5d ac df c5 5c dd da 8e c7 10 8a 5e ff f9 f5 dc 3c c3 4b f3 8d 59 b1 2f ff c5 4d 31 5e db 67 42 fc de a8 cd 47 49 ec 8b 38 36 26 45 bd ec 25 e9 90 61 ad 5d ac e3 fd f5 d5 3a d2 8d 3f 4d d2 ef da 7f aa 4f c4 b0 f1 f1 dc 49 79 59 46 1b 3f 2f b9 41 6d e8 ff c2 be 98 f9 9d 6e 9e a7 57 57 e8 c9 67 ad 5a 7b 9e df e5 d5 32 16 8b 69 2c 96 33 ca b3 5a fc ae 96 51 c5 8d 7c 95 61 67 78 1b 1e 59 87 6d b0 f9 5d cc 8d a3 a4 a1 a4 43 bf 7e ae 08 6b e3 df b0 56 c4 57 fc 2d 33 0d cb e5 82 77 49 e3 12 b7 2a df 85 17 ab f8 6f c2 a5 2d dc e9 7f 8e f9 58 df 51 ab ed 46 bd d6 c9 b0 96 8b 61 cc e6 27 31 9f cf 63 b6 ac c7 9c 67 b1 24 2e 93 46 d8 cd 46 2b 9a f5 3a 79 82 b7 8c 80 10 f1 85 fd 28 e6 8b 73 fc 4d 62 3a 6f c4 64 d6 8a e9 02 1a 10 77 ad ba 88 46 7d 15 bd 6e 3f 1a d5 3e 7e 1b 51 a9 d5 Data Ascii: PNGIHDRs0sBIT\|dsRGBgAMAapHYs+tEXtSoftwareAdobe Fireworks CS5.1HtEXtCreation Time11/29/11wIIDATx^[z={w[yeX+HQ) CeLap(ccedYC{N3{~s[Lw]zzk\bjjj=uO/Za_{n^AIM_^i(j.7~\|?/<kRNwo]\^<KY/M1^gBGI86&E%a]:?MOIyYF?/AmnWWgZ{2i,3ZQ\|agxYm]C~kVW-3wI*o-XQFa'1cg$.FF+:y(sMb:odwF}n?>~Q
Apr 26, 2024 06:11:23.241767883 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:23.496721983 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:23 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu114.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=13 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:25.864463091 CEST	636	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.096848965 CEST	1187	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: image/jpeg Content-Length: 35376 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:56:30 GMT x-rgw-object-type: Normal ETag: "5c05636635842ee4c0c164318094f5e7" x-amz-request-id: tx00000b393fdf4a3be4b90-00662b296d-e8f4575-sfo1 X-Storage-Bucket: zbd32 X-Storage-Object: bd32f3cab9704bf77f246fbc52aabe16fa2196089c00b6ccd2e3daf923079b1e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0
Apr 26, 2024 06:11:26.144265890 CEST	627	OUT	GET /files/theme/images/calendar.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.372982025 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/png; charset=binary Content-Length: 1690 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:56 GMT x-rgw-object-type: Normal ETag: "1f045450638098444665375fa5b56412" x-amz-request-id: tx0000095d6b566aee68a03-00652dcc43-db1eedd-sfo1 X-Storage-Bucket: zbdcc X-Storage-Object: bdccde3f44f13b0314fa16e7370bf4752f3615d9ce74884e03952b4fad35f866 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 14 08 06 00 00 00 89 7c cd 30 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 33 32 36 42 42 45 35 46 42 41 45 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 33 32 36 42 42 45 36 46 42 41 45 31 31 45 33 41 Data Ascii: PNGIHDR\|0tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE5FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBE6FBAE11E3A
Apr 26, 2024 06:11:26.467751026 CEST	662	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.700067043 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 47105 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:27 GMT x-rgw-object-type: Normal ETag: "52ce31bb4e1610bd5352d781d979fc9f" x-amz-request-id: tx00000788665e69d002bff-00662b296e-e9549c7-sfo1 X-Storage-Bucket: z4fbe X-Storage-Object: 4fbedc936f8eed9350bc7ea19aebc3ea8661601a2ded15990a410f6e8ded028c Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49764	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:01.486974001 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:01.653529882 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:01 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166011 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1219 X-Timer: S1714104662.566124,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:03.894318104 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:04.053149939 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:03 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253292 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 2528 X-Timer: S1714104664.973552,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:04.802346945 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:04.961200953 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:04 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166014 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1220 X-Timer: S1714104665.881623,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:07.441332102 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:07.600769043 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:07 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253295 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 2529 X-Timer: S1714104668.521040,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:07.996862888 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:08.155888081 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:08 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166017 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1221 X-Timer: S1714104668.076167,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:11.485588074 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:11.644316912 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:11 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253299 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 2530 X-Timer: S1714104672.564632,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:25.985081911 CEST	294	OUT	GET /images/old/bg_feed.gif HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:26.144027948 CEST	1242	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 299 X-GUploader-UploadID: ABPtcPpEwDIvKXQbT29jz-GdVM_qDhqgXzbDcY2FWHe8jHsAImMdc4MUoQ4trukU1gjSIeUvtnA Cache-Control: public, max-age=86400, s-maxage=259200 Expires: Tue, 09 Apr 2024 05:21:58 GMT Last-Modified: Thu, 25 May 2017 18:44:03 GMT ETag: "974a8ea2a8b86c3d99cfef5dd1e28827" x-goog-generation: 1495737843178700 x-goog-metageneration: 6 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 299 Content-Type: image/gif x-goog-hash: crc32c=SE8U5w== x-goog-hash: md5=l0qOoqi4bD2Zz+9d0eKIJw== x-goog-storage-class: STANDARD Server: UploadServer Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:11:26 GMT Via: 1.1 varnish Age: 168530 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 247 X-Timer: S1714104686.064345,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 11 f1 0c fb dc be db 96 5e f1 89 0e cc 6a 29 f1 ae 0c ff ff ff ed ad 30 f8 d1 7d f5 9e 4a f3 b1 24 dc 77 1d fd f2 e6 f1 a3 0c d8 86 35 f8 c1 79 f7 bf 48 ff cc 99 f3 dc 18 f1 be 0c fc eb c9 f4 df 2d f1 93 0c f6 ae 59 f2 d6 15 f5 d2 46 fc e2 c9 e9 a7 3e f3 d1 16 f0 9f 11 f9 da 96 f8 c4 87 21 f9 04 05 14 00 00 00 2c 00 00 00 00 10 00 10 00 00 05 a8 20 00 14 45 63 36 56 3a ac 22 a0 5c 5e 25 49 18 c6 dd 53 37 00 c7 c3 64 93 a0 70 68 19 28 3c 99 00 85 82 50 0c 49 85 c5 a1 32 a1 18 ae 06 04 94 34 59 6c 24 93 0c 22 c0 b8 52 14 a7 ee 86 53 40 78 20 c7 2b a3 43 ef 2e 26 16 cd 55 b3 79 5c 23 29 76 78 1f 56 57 09 11 57 1b 16 5d 04 05 29 16 17 65 14 16 65 80 13 04 04 0d 03 17 1a 17 09 57 0f 1f 06 0c 03 97 04 3a 7a 06 03 01 06 01 1b 57 a5 98 2b 88 14 9b 06 1a 16 57 17 07 98 0b 2b 09 2b 9b c0 17 17 08 02 04 00 04 be 8f 74 cd 1d 0e c8 22 98 d3 d4 d3 22 21 00 3b Data Ascii: GIF89a^j)0}J$w5yH-YF>!, Ec6V:"\^%IS7dph(<PI24Yl$"RS@x +C.&Uy\#)vxVWW])eeW:zW+W++t""!;
Apr 26, 2024 06:11:26.465490103 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:26.624263048 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:26 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166036 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1222 X-Timer: S1714104687.544622,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:40.009179115 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:40.168319941 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:40 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253328 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 2531 X-Timer: S1714104700.088671,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:40.331422091 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:40.490078926 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:40 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166050 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1223 X-Timer: S1714104700.410517,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:45.889620066 CEST	426	OUT	GET /images/site/footer/footer-toast-published-image-1.png HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "6e0f7ad31bf187e0d88fc5787573ba71" If-Modified-Since: Tue, 12 Feb 2019 18:19:08 GMT
Apr 26, 2024 06:11:46.048477888 CEST	474	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:45 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "6e0f7ad31bf187e0d88fc5787573ba71" Expires: Thu, 11 Apr 2024 05:49:28 GMT Age: 253334 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 2532 X-Timer: S1714104706.968860,VS0,VE0 Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Apr 26, 2024 06:11:46.272897959 CEST	413	OUT	GET /images/landing-pages/global/logotype.svg HTTP/1.1 Host: cdn2.editmysite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 If-None-Match: "bc61dcb431a14c508075eeff4f74523a" If-Modified-Since: Wed, 10 Oct 2018 21:37:00 GMT
Apr 26, 2024 06:11:46.431623936 CEST	497	IN	HTTP/1.1 304 Not Modified Connection: keep-alive Date: Fri, 26 Apr 2024 04:11:46 GMT Via: 1.1 varnish Cache-Control: public, max-age=86400, s-maxage=259200 ETag: "bc61dcb431a14c508075eeff4f74523a" Expires: Sat, 27 Apr 2024 06:04:10 GMT Age: 166056 X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1224 X-Timer: S1714104706.351941,VS0,VE0 Vary: Accept-Encoding Access-Control-Allow-Origin: * alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49841	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:10.826591015 CEST	759	OUT	GET /uploads/1/0/3/6/10363185/savita_orig.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/health-professionals.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104667.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0
Apr 26, 2024 06:11:11.095720053 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/png Content-Length: 165660 Connection: keep-alive Last-Modified: Wed, 09 Feb 2022 03:22:52 GMT x-rgw-object-type: Normal ETag: "7547236310eabef905f40eed8a1a5997" x-amz-request-id: tx0000053d8a69519dfc2ab-00662b295e-e8f48a8-sfo1 X-Storage-Bucket: zd813 X-Storage-Object: d81371654521767e6ba8a9739633a1897d401e6982378a689c403e02b3e31240 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 91 00 00 01 83 08 06 00 00 00 ea 3f 2d c7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 80 00 49 44 41 54 78 da ec fd 57 b0 2d 59 9a df 87 fd 96 c9 cc ed 8f b9 de 95 6f 5f 5d 33 3d d3 63 1a 63 30 c0 0c 06 9e 00 04 82 22 00 99 50 30 48 86 42 4f 7a 91 5e e4 42 62 c8 86 a4 90 5e c1 08 52 12 48 40 14 49 80 e2 00 a3 81 9b e1 4c f7 f4 58 b4 ef e9 2e d7 55 75 6f 5d 7f cf 39 fb 6c 9f 99 6b 2d 3d ac 5c b9 33 73 ef 7d cc 35 65 ba cf 77 63 c7 b9 db 64 e6 ca 95 99 eb 73 ff ef ff 89 ff df 3f fb 75 47 43 84 14 8d 4f 2c a7 11 21 c4 31 df cb da 7b e9 38 fa f7 a7 3a fa 93 8f ef 4c 8e 16 e7 dc 93 ef a4 ba 3f 5b bf bf 9a fb 0f d7 ab f9 79 78 7f dc 78 ec 31 df af db de 59 8b 31 a6 d8 d6 d6 ee 99 95 df 3b b3 32 de f9 7c ce 78 3c 66 3e 9f 93 cd 67 84 5b 5e 4a 89 10 02 21 54 f9 7b a9 ec ca f6 9b de 87 63 4b 29 d1 5a a3 94 42 09 81 94 aa fc 9d df bf 40 29 7f 0c 81 46 08 81 2c 3e 77 ce d5 7e eb 9c 58 7b 5c 27 fd a0 a5 50 6b 9f 99 30 16 6b c3 98 d6 8f db 14 bf 0b eb 4a f8 5c 86 7d ba fa 7a b0 b2 fe 34 be 77 ce 61 ac 2d 8f af 54 44 ab dd 02 2c b3 d9 8c f1 78 8c 31 06 b0 58 e7 6a d7 df 39 4b 9e 3b da 9d 36 fd 7e 9f 6e a7 8b 8a 62 a4 54 95 23 2c 8f 57 bd 56 72 c3 75 59 b9 5e 52 ae fd dd a6 f7 4d 91 a7 5c 9f 56 ae 5b e3 fe b4 6b 9e 1b 6b 0c b9 31 58 6b 99 cf 66 38 e7 88 e3 98 4e b7 4b a4 f5 89 d7 48 e7 1c fa 54 a3 dd 28 4d 25 73 dc 00 24 67 72 26 3f 2a 22 d5 ea 62 e3 9c a9 29 92 d3 48 50 12 cb 45 ec 98 e7 49 18 10 02 27 04 08 81 40 d5 b6 dd b4 7d 53 29 2d c7 fe 74 8d 88 c7 3d ff a0 0c c5 8a f2 92 80 d9 b0 ad 44 c8 d3 19 c5 3f 2a d2 bc af 4e 2a 67 ab f9 99 9c c9 99 1c 21 cf 78 89 70 f2 b1 be 97 8f b1 d8 9d c9 b3 91 c7 f2 44 56 2f de d1 ee dc 8a 7c b8 86 cc 99 7c c8 d2 0c 5f Data Ascii: PNGIHDR?-gAMAa cHRMz&u0`:pQ<bKGDpHYsodorNTwIDATxW-Yo_]3=cc0"P0HBOz^Bb^RH@ILX.Uuo]9lk-=\3s}5ewcds?uGCO,!1{8:L?[yxx1Y1;2\|x<f>g[^J!T{cK)ZB@)F,>w~X{\'Pk0kJ\}z4wa-TD,x1Xj9K;6~nbT#,WVruY^RM\V[kk1Xkf8NKHT(M%s$gr&?"b)HPEI'@}S)-t=D?N*g!xpDV/\|\|_
Apr 26, 2024 06:11:11.095757961 CEST	79	IN	Data Raw: ad dc 2f c7 84 b7 3e 6c 4b f8 38 91 0e 84 f3 7f a5 03 bb 21 ec f1 38 b2 2e 34 b2 ce 82 74 ce e1 5c 31 8f 36 42 28 89 28 fe ad 0e 58 50 55 16 65 78 8a 6a b8 69 b9 5d e5 28 c5 e6 45 b8 aa b9 0e 10 ce db 55 7f 5e d9 43 f8 2b 6b e7 26 2a 63 Data Ascii: />lK8!8.4t\16B((XPUexji](EU^C+k&*c
Apr 26, 2024 06:11:11.095796108 CEST	1289	IN	Data Raw: 71 58 40 ae b9 e6 02 25 25 d6 b9 9a 37 55 0f d3 15 bf 6c 7a 2a d6 21 85 7b 2c ab fb 63 25 a2 b8 fe 2b 73 e7 8a ef c2 eb c9 e4 cc 13 39 93 33 79 c6 f2 51 52 7a ab 63 91 58 fb c3 b3 90 1e 37 d7 ce 3a 9f 13 f8 08 5d 93 8f bb e8 d5 24 fa 99 9c c9 8f Data Ascii: qX@%%7Ulz*!{,c%+s93yQRzcX7:]$JiH}<+l5w3!.pA=O~ayzduo93y.Z+,BQ:gp?<aq.:&Yv)+\|H3Grq<zUn#D5[
Apr 26, 2024 06:11:11.095838070 CEST	79	IN	Data Raw: 02 42 d7 16 ed a3 ce df 58 bb a4 7c 07 90 b6 a4 61 01 ef c5 58 67 91 45 c8 68 dd bc 35 69 5d 9a 9f 07 8f cc d8 dc 27 ec 79 ba 39 a1 27 11 5f 2f f3 61 8f e2 e3 27 d5 7b 40 c3 33 36 5b ce e4 4c 3e 22 b2 a9 0d 2e 04 0b b5 91 23 a9 c4 d4 3d Data Ascii: BX\|aXgEh5i]'y9'_/a'{@36[L>".#=
Apr 26, 2024 06:11:11.095876932 CEST	1125	IN	Data Raw: d4 b5 b9 78 da c6 7e 97 89 e6 2a f5 46 53 81 6c 5a 74 8f 93 b0 88 ab c6 7e c2 ff ad 71 08 51 1c d3 89 15 cb 7e 39 0e 51 8c 5d 16 75 23 9e 4f 4a 16 55 df d6 82 b1 01 41 26 71 ce 90 57 a8 42 8e 63 22 ae ce 61 e0 22 0b 3c 64 52 a9 d5 1c 43 39 c0 fa Data Ascii: x~*FSlZt~qQ~9Q]u#OJUA&qWBc"a"<dRC9<W!D^UJq#9qH~r9Pi'RN/QM%r&g)OJx\|uY88)@X@hB%cnT[cjSi\|(tRe98S"gg]tBl}'k
Apr 26, 2024 06:11:11.095916986 CEST	1289	IN	Data Raw: 28 aa db af 43 eb 54 15 87 a8 c6 77 ad c3 d9 62 b1 55 9e 1c 31 cb 32 72 bb 0c b9 28 a5 f0 a9 12 5b 8b 43 6f 52 54 b6 72 0e 5a 6b ac ab 9f 8b b5 79 39 4d 9e b3 4b f2 c4 e8 b1 46 9e d2 39 c8 73 c0 e5 e5 82 d3 2c 6f 28 73 34 c2 14 75 13 a1 43 a0 c3 Data Ascii: (CTwbU12r([CoRTrZky9MKF9s,o(s4uC[!VXpVOR_$(%jlVEIV$EFY&=uypf'2<d0mU#^lQ[YwQ2yY7
Apr 26, 2024 06:11:11.095966101 CEST	79	IN	Data Raw: e9 90 38 91 63 09 f5 11 ce 3b 73 95 35 67 13 92 ce ba d5 d0 d4 12 7c 50 b9 1d d7 34 10 0b 0a a7 29 d5 7d 04 e8 b6 a5 ca 63 e6 bd 0c bf ab fa 75 0d 09 f6 e5 d4 d4 af 85 54 9e cb cc 5f 5f e3 73 44 d6 92 e7 0b ac cd 40 79 7c 5c c0 7b 39 e0 Data Ascii: 8c;s5g\|P4)}cuT__sD@y\|\{9
Apr 26, 2024 06:11:11.096003056 CEST	1289	IN	Data Raw: f2 c5 8b 2c 16 0b 86 07 07 64 45 0b 82 33 4f e4 63 26 3e ec e0 17 3c 6b d3 e2 af 2d e3 bc 42 48 f2 3c 3f 52 89 54 c5 5a e3 0b eb 36 24 8c ab bd a9 cb cf d6 28 11 bb 69 fb 35 8a e2 28 25 00 45 11 9b b1 18 93 97 0f 56 2d ef b0 01 c9 55 25 49 ac 5b Data Ascii: ,dE3Oc&><k-BH<?RTZ6$(i5(%EV-U%I[~qPI^"zk61Lx!vxR]pAeyl:CiVQ2-vB>'>">qd1%_"iZH)4KNELrkNbzzoKix
Apr 26, 2024 06:11:11.096041918 CEST	79	IN	Data Raw: 38 0c f3 d9 1c 63 8d af 15 71 8e cc e4 fe fa 1a c3 62 b1 60 3e 4b 8b 90 ab 2a a9 73 04 10 00 d1 ed 76 9b 73 e7 ce 9d 79 22 1f 47 69 56 77 07 cb 21 37 f5 24 f4 32 e9 1a 20 7f a7 03 50 2c 6f c8 e2 38 61 61 6f 24 ce ad 58 af 34 ea fb a8 6e Data Ascii: 8cqb`>K*svsy"GiVw!7$2 P,o8aao$X4n
Apr 26, 2024 06:11:11.096081972 CEST	1289	IN	Data Raw: b3 7a ac f0 00 9d 46 84 10 a8 82 9f 2a 88 cf 0d e9 d2 4a ce 16 39 99 4d cb c5 28 37 3e 07 34 9d 8d 39 3c 3c 64 3a 9d 92 cd 17 b5 7d ea 28 a2 dd 8a 8b 05 d6 31 18 0c ca 6a df 48 27 6c 6d ed f0 fc f3 cf f3 f0 e1 43 46 c3 43 fa 5b 03 e6 f3 39 dd de Data Ascii: zFJ9M(7>49<<d:}(1jH'lmCFC[9}s8;`<CGj,_<-tNsL[}LdT"cr!qX,LmPt@1h%1!cY4+M;kI`hw9qh){j'^z5+
Apr 26, 2024 06:11:11.096136093 CEST	79	IN	Data Raw: de fb dc e2 7d e6 f3 39 8b 2c 5d d6 83 58 5b 16 f1 c9 e2 61 9a 8c c7 24 ad 16 ce 19 a6 d3 11 60 f9 e4 a7 3e 09 c0 e1 e1 21 3b bb bb 85 32 b3 a5 07 e3 2d 7f 55 86 79 8c 35 64 c6 10 10 97 d5 42 b1 ea 73 27 84 40 cb b8 bc ae c6 da 32 1c 11 Data Ascii: }9,]X[a$`>!;2-Uy5dBs'@2
Apr 26, 2024 06:11:11.297125101 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:10 GMT Content-Type: image/png Content-Length: 165660 Connection: keep-alive Last-Modified: Wed, 09 Feb 2022 03:22:52 GMT x-rgw-object-type: Normal ETag: "7547236310eabef905f40eed8a1a5997" x-amz-request-id: tx0000053d8a69519dfc2ab-00662b295e-e8f48a8-sfo1 X-Storage-Bucket: zd813 X-Storage-Object: d81371654521767e6ba8a9739633a1897d401e6982378a689c403e02b3e31240 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 91 00 00 01 83 08 06 00 00 00 ea 3f 2d c7 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 80 00 49 44 41 54 78 da ec fd 57 b0 2d 59 9a df 87 fd 96 c9 cc ed 8f b9 de 95 6f 5f 5d 33 3d d3 63 1a 63 30 c0 0c 06 9e 00 04 82 22 00 99 50 30 48 86 42 4f 7a 91 5e e4 42 62 c8 86 a4 90 5e c1 08 52 12 48 40 14 49 80 e2 00 a3 81 9b e1 4c f7 f4 58 b4 ef e9 2e d7 55 75 6f 5d 7f cf 39 fb 6c 9f 99 6b 2d 3d ac 5c b9 33 73 ef 7d cc 35 65 ba cf 77 63 c7 b9 db 64 e6 ca 95 99 eb 73 ff ef ff 89 ff df 3f fb 75 47 43 84 14 8d 4f 2c a7 11 21 c4 31 df cb da 7b e9 38 fa f7 a7 3a fa 93 8f ef 4c 8e 16 e7 dc 93 ef a4 ba 3f 5b bf bf 9a fb 0f d7 ab f9 79 78 7f dc 78 ec 31 df af db de 59 8b 31 a6 d8 d6 d6 ee 99 95 df 3b b3 32 de f9 7c ce 78 3c 66 3e 9f 93 cd 67 84 5b 5e 4a 89 10 02 21 54 f9 7b a9 ec ca f6 9b de 87 63 4b 29 d1 5a a3 94 42 09 81 94 aa fc 9d df bf 40 29 7f 0c 81 46 08 81 2c 3e 77 ce d5 7e eb 9c 58 7b 5c 27 fd a0 a5 50 6b 9f 99 30 16 6b c3 98 d6 8f db 14 bf 0b eb 4a f8 5c 86 7d ba fa 7a b0 b2 fe 34 be 77 ce 61 ac 2d 8f af 54 44 ab dd 02 2c b3 d9 8c f1 78 8c 31 06 b0 58 e7 6a d7 df 39 4b 9e 3b da 9d 36 fd 7e 9f 6e a7 8b 8a 62 a4 54 95 23 2c 8f 57 bd 56 72 c3 75 59 b9 5e 52 ae fd dd a6 f7 4d 91 a7 5c 9f 56 ae 5b e3 fe b4 6b 9e 1b 6b 0c b9 31 58 6b 99 cf 66 38 e7 88 e3 98 4e b7 4b a4 f5 89 d7 48 e7 1c fa 54 a3 dd 28 4d 25 73 dc 00 24 67 72 26 3f 2a 22 d5 ea 62 e3 9c a9 29 92 d3 48 50 12 cb 45 ec 98 e7 49 18 10 02 27 04 08 81 40 d5 b6 dd b4 7d 53 29 2d c7 fe 74 8d 88 c7 3d ff a0 0c c5 8a f2 92 80 d9 b0 ad 44 c8 d3 19 c5 3f 2a d2 bc af 4e 2a 67 ab f9 99 9c c9 99 1c 21 cf 78 89 70 f2 b1 be 97 8f b1 d8 9d c9 b3 91 c7 f2 44 56 2f de d1 ee dc 8a 7c b8 86 cc 99 7c c8 d2 0c 5f Data Ascii: PNGIHDR?-gAMAa cHRMz&u0`:pQ<bKGDpHYsodorNTwIDATxW-Yo_]3=cc0"P0HBOz^Bb^RH@ILX.Uuo]9lk-=\3s}5ewcds?uGCO,!1{8:L?[yxx1Y1;2\|x<f>g[^J!T{cK)ZB@)F,>w~X{\'Pk0kJ\}z4wa-TD,x1Xj9K;6~nbT#,WVruY^RM\V[kk1Xkf8NKHT(M%s$gr&?"b)HPEI'@}S)-t=D?N*g!xpDV/\|\|_
Apr 26, 2024 06:11:16.990458012 CEST	760	OUT	GET /research.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:17.252851963 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:17 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:17 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"3e532273ab6cce2e10b6262b4092f91f-gzip" Content-Encoding: gzip X-Host: grn20.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 8957 Keep-Alive: timeout=10, max=71 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 77 db b8 92 e0 67 fb 9c fd 0f 68 f5 ed 48 ee 96 a8 b7 65 cb 8f be 7e 25 9d 3b ed 44 37 4a 6e cf 9c 24 a3 03 91 90 c4 98 22 19 82 b4 a3 71 fb 9c f9 be 7f 62 7f cb fe 94 fd 25 5b 55 00 5f 12 65 cb 71 f7 ee dc 39 e9 87 44 01 85 42 a1 5e a8 02 40 f8 f0 bb f3 d7 67 6f ff 6d 70 c1 66 e1 dc 39 de 3e c4 2f e6 70 77 7a 54 12 6e e9 78 7b eb 70 26 b8 05 df 5b 87 a1 1d 3a e2 f8 8d 90 82 07 e6 8c d5 d8 69 60 cb 31 77 05 1b 70 db 65 6f c4 8c 8f 6d c7 0e 79 68 7b 2e 1b 8a e0 da 36 c5 61 5d 35 3b 9c 8b 90 33 3f f0 7c 11 84 8b a3 92 37 ed 4b 3b 14 23 97 cf 45 89 99 9e 1b 0a 37 3c 2a 6d 82 b2 c4 ea 40 e8 2a 3e ea 28 83 2b a6 74 1d bc 25 a4 19 d8 3e a2 ce b4 fa 3f ff f9 3f 59 32 c6 41 e0 4d 03 3e 97 ff fb 7f 31 f8 ef ed cc 96 cc 76 27 5e 30 57 04 c1 7f a7 83 37 43 06 c5 80 f9 da b6 84 c5 b8 64 9c 4d 23 78 66 a1 c7 bc 28 60 41 8c 0d c0 b9 cb 04 c2 b9 a6 a8 8d b9 44 78 1f 9a 72 a8 05 68 1f 07 3d e7 2e 9f 8a 39 10 03 d0 16 61 88 a4 60 de 84 05 de 38 92 21 76 65 0a 29 85 64 40 09 fb 1c 71 60 d0 02 fa 95 51 c0 01 2f 40 1a 86 b1 6e d0 f6 1c 90 67 86 3b 0b 43 bf 5f af df dc dc 18 d8 7b 90 e3 b8 61 7a 73 83 47 f5 c8 77 3c 6e c9 7a b3 de a8 b7 eb bb f5 66 a3 bd db 6e ee 75 eb 63 3f 90 35 c7 9b 7a c6 27 7f ba ae cb 28 70 1e db 61 cc 32 03 d5 91 f0 c2 3f 0a 35 b6 af 89 cf 91 7d 7d 54 3a 53 48 6b 6f 17 7e 76 4c a1 f8 12 d6 b1 e5 01 33 67 3c 90 22 3c 8a c2 49 6d af 94 d0 87 5a 77 54 ba b6 c5 8d ef 05 61 a6 e9 8d 6d 85 b3 23 4b a0 9e d5 e8 47 15 24 6e 87 36 77 6a d2 e4 8e 38 6a 1a 8d ea 1c 8a e6 50 12 d9 60 21 60 1a 68 1d 8e ed 5e 31 db 02 14 a8 d7 24 dc 9a 0c 17 a8 91 81 70 8e 4a f4 2c 67 42 40 77 21 d0 ab c9 34 a5 2c b1 59 20 26 47 a5 7a dd b4 dc 96 21 2c 3b 9c 2f 10 09 72 03 01 ea f8 43 1a f0 f4 f3 38 b2 1d eb ad 0d d4 37 77 3b 9d f6 6e 73 af d3 52 7c a7 fe 9f dc 93 e7 58 f5 09 68 d1 62 ec 7d a1 0e ff 9c 6e a4 67 22 47 6d e0 7b 66 5c e1 f2 b8 e6 d0 94 43 4f 66 20 84 5b 05 a5 fa 24 4c 65 ae 8f 26 65 62 03 44 7d 0e 1a 37 22 e8 74 70 bd 5e 73 77 1f da a1 f7 88 a5 17 ce c0 00 6b d4 3e e9 89 10 95 eb f5 09 e8 8a 34 a6 9e 37 75 04 f7 6d 19 0f ea e7 09 9f db ce e2 e8 0c f4 d9 ed 77 1a 8d 6a 0f fe 87 6f d0 6d c7 36 f1 97 7a 7a 26 a3 31 ea a4 03 2a ef 56 e9 b3 06 e4 96 69 2c e5 74 2c 65 35 96 72 3c 96 f2 e3 69 b9 c4 7a 11 04 3c 8c 09 7a 52 e7 db 87 04 b0 5c 75 bc 6d 28 b6 09 87 fc 96 d4 3f 5d 2f ac 4d 3c 2f 14 41 1f 1e 2b ba 14 e7 13 11 24 b0 3b cc b2 Data Ascii: }kwghHe~%;D7Jn$"qb%[U_eq9DB^@gompf9>/pwzTnx{p&[:i`1wpeomyh{.6a]5;3?\|7K;#E7<m@>(+t%>??Y2AM>1v'^0W7CdM#xf(`ADxrh=.9a`8!ve)d@q`Q/@ng;C_{azsGw<nzfnuc?5z'(pa2?5}}T:SHko~vL3g<"<ImZwTam#KG$n6wj8jP`!`h^1$pJ,gB@w!4,Y &Gz!,;/rC87w;nsR\|Xhb}ng"Gm{f\COf [$Le&ebD}7"tp^swk>47umwjom6zz&1*Vi,t,e5r<iz<zR\um(?]/M</A+$;
Apr 26, 2024 06:11:17.276638031 CEST	692	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/research.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:17.503993988 CEST	1274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:17 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn67.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;
Apr 26, 2024 06:11:17.565529108 CEST	763	OUT	GET /uploads/1/0/3/6/10363185/background-images/869984522.png HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/research.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104671.0.0.0
Apr 26, 2024 06:11:17.797907114 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:17 GMT Content-Type: image/png Content-Length: 418549 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:37 GMT x-rgw-object-type: Normal ETag: "64ccce51a2cdfdf456b9e27fdebe61a9" x-amz-request-id: tx000000a868b6564398849-00662b2965-e8f48a8-sfo1 X-Storage-Bucket: zd0ac X-Storage-Object: d0ac970277c573254a3d9e81e73e0c1385868ba193a29bce56047cd737269e81 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 01 15 08 06 00 00 00 73 30 cf 0a 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 31 31 2f 32 39 2f 31 31 1d d4 f1 77 00 00 ff 49 49 44 41 54 78 5e ec fd 09 d0 ad 5b 7a df 85 3d 7b 1e bf f9 cc 77 ea db b7 5b dd ad 79 b6 65 cb 58 01 13 8c 2b e0 90 0a 81 10 13 c8 48 51 09 a4 0a 9c 0a 29 12 20 0c 81 a2 80 82 14 43 c5 65 4c 61 a0 70 28 63 ec b2 00 63 84 65 cb b6 90 64 59 43 ab a7 7b fb 4e e7 de 33 9f f3 cd 7b 9e be fc 7e cf da fb 9c 73 5b 92 c1 4c ee 96 f6 fa be 77 bf eb 5d f3 7a d6 b3 d6 7a fe 6b ac 5c a1 62 ab b6 6a ab b6 6a ab b6 6a ab fe 1a 2a bb e2 ca fa fd ab 95 3d 75 05 eb 4f f6 d8 2f 7f e8 f7 85 ba ba 5a 61 bb b6 5f 7b da fc 6e ba fd f2 5e bb 41 f9 ed df 0a bf fa 49 ff eb f7 c6 ed c6 4d f9 7f d9 dc 5f e2 d4 5e ff 19 9e 69 28 6a e3 2e ff 37 7e d2 a6 7c ab af 9a 3f fe 2a 2f e5 e5 e5 3c 6b aa b6 52 a9 a6 4e 77 15 1c f8 9d 6f 5d ac df c5 5c dd da 8e c7 10 8a 5e ff f9 f5 dc 3c c3 4b f3 8d 59 b1 2f ff c5 4d 31 5e db 67 42 fc de a8 cd 47 49 ec 8b 38 36 26 45 bd ec 25 e9 90 61 ad 5d ac e3 fd f5 d5 3a d2 8d 3f 4d d2 ef da 7f aa 4f c4 b0 f1 f1 dc 49 79 59 46 1b 3f 2f b9 41 6d e8 ff c2 be 98 f9 9d 6e 9e a7 57 57 e8 c9 67 ad 5a 7b 9e df e5 d5 32 16 8b 69 2c 96 33 ca b3 5a fc ae 96 51 c5 8d 7c 95 61 67 78 1b 1e 59 87 6d b0 f9 5d cc 8d a3 a4 a1 a4 43 bf 7e ae 08 6b e3 df b0 56 c4 57 fc 2d 33 0d cb e5 82 77 49 e3 12 b7 2a df 85 17 ab f8 6f c2 a5 2d dc e9 7f 8e f9 58 df 51 ab ed 46 bd d6 c9 b0 96 8b 61 cc e6 27 31 9f cf 63 b6 ac c7 9c 67 b1 24 2e 93 46 d8 cd 46 2b 9a f5 3a 79 82 b7 8c 80 10 f1 85 fd 28 e6 8b 73 fc 4d 62 3a 6f c4 64 d6 8a e9 02 1a 10 77 ad ba 88 46 7d 15 bd 6e 3f 1a d5 3e 7e 1b 51 a9 d5 Data Ascii: PNGIHDRs0sBIT\|dsRGBgAMAapHYs+tEXtSoftwareAdobe Fireworks CS5.1HtEXtCreation Time11/29/11wIIDATx^[z={w[yeX+HQ) CeLap(ccedYC{N3{~s[Lw]zzk\bjjj=uO/Za_{n^AIM_^i(j.7~\|?/<kRNwo]\^<KY/M1^gBGI86&E%a]:?MOIyYF?/AmnWWgZ{2i,3ZQ\|agxYm]C~kVW-3wI*o-XQFa'1cg$.FF+:y(sMb:odwF}n?>~Q
Apr 26, 2024 06:11:21.355632067 CEST	764	OUT	GET /our-partners.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Apr 26, 2024 06:11:21.609487057 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:21 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:21 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"4f947907db59c7eafc2cc0ee50ac5133-gzip" Content-Encoding: gzip X-Host: blu76.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 7548 Keep-Alive: timeout=10, max=36 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 73 db 38 92 9f ed aa fb 0f 88 66 2f 94 67 24 ea 65 59 b6 1e 9e 75 1c cf 6c b6 f2 f0 44 ce e6 b6 e2 ac 0a 22 21 89 31 45 32 04 69 45 eb a8 ea be df 9f b8 df 72 3f e5 7e c9 75 03 e0 4b 22 6d 39 9e ec ed 5d 79 66 2c 89 40 a3 d1 2f 34 ba 41 00 d3 7f f2 fc cd e9 c5 5f cf cf c8 2c 98 db c7 bb 7d fc 22 36 75 a6 83 12 73 4a c7 bb 3b fd 19 a3 26 7c ef f4 03 2b b0 d9 f1 9b d0 27 e7 d4 0f 1c e6 73 52 25 cf 7c 8b 8f a9 c3 a0 cc 72 c8 5b 36 a3 63 cb b6 02 1a 58 ae 43 86 cc bf b6 0c d6 af c9 a6 fd 39 0b 28 f1 7c d7 63 7e b0 1c 94 dc 69 97 5b 01 1b 39 74 ce 4a c4 70 9d 80 39 c1 a0 b4 0d ca 12 a9 01 b1 9b f8 44 47 29 5c 69 6a 8b da 98 8c 1b be e5 21 fa 54 cb ff fe f7 ff f8 2d 64 cc e1 20 0c 73 83 0a 8f 19 16 b5 2d 1e 70 b2 1d 14 f6 47 03 c6 09 e5 c4 03 82 88 3b 21 f4 bf fe 73 ce 4c cb a0 b6 bd 24 3c f4 90 35 ce 4c 32 b1 80 5e ce 89 01 84 f8 4c 27 17 33 b6 44 92 af 2d 93 11 4a 7c d0 0e c3 f6 5c ca 02 70 5a 80 87 d0 80 cc 98 ed 59 ce 94 2c dd 90 cc a9 43 a7 4c d7 f5 22 be ad 39 d4 a7 38 9e 05 81 d7 ad d5 16 8b 85 ee 81 e4 fd 0c 33 ba e1 ce 75 1a d6 42 cf 76 a9 c9 6b 8d 5a bd d6 aa 1d d4 1a f5 d6 41 ab 71 d8 ae 8d 3d 9f 57 6d 77 ea ea 9f bc 69 51 97 a1 6f df b7 43 37 f4 ab 9e d2 a0 8e d6 29 70 c3 3f 12 3d e2 a8 b2 cf a1 75 3d 28 9d 4a c4 d5 8b a5 97 e6 2b 60 5f 82 1a b6 ec 11 63 46 7d ce 82 41 18 4c aa 87 a5 98 46 34 c0 41 e9 da 62 0b cf f5 83 54 d3 85 65 06 b3 81 c9 50 cc 55 f1 50 21 96 63 05 a0 d5 2a 07 bd b1 41 43 af 57 e6 50 34 87 92 d0 82 01 03 23 05 07 8b 6d 39 57 c4 32 01 05 9a 78 75 4c 39 ab f2 60 89 c6 e9 33 7b 50 12 bf f9 8c 31 e8 2e 00 7a 15 99 06 07 33 9d f9 6c 32 28 d5 6a 86 e9 34 75 30 90 60 be 44 24 28 11 04 a8 e1 03 d7 e1 d7 cf e3 d0 b2 cd 0b d0 fe a0 71 b0 bf df 3a 68 1c ee 37 a5 ec 45 ff 0f ee c9 b5 cd da 84 3a c6 72 ec 7e 11 1d 7e 9f 6e b8 8b e3 a4 6a 81 dc 53 7c 05 eb 7c e1 60 a1 d0 93 e1 c3 88 ab 80 61 7d 62 86 1c b5 f7 26 65 62 01 44 6d 0e 56 37 12 d0 09 73 9d 4e e3 e0 08 da a1 23 89 b4 17 cc d8 9c 55 45 fb b8 27 81 48 ab d5 26 60 2b 5c 9f ba ee d4 66 d4 b3 78 c4 d4 cf 13 3a b7 ec e5 e0 14 6c da e9 ee d7 eb 95 0e fc c1 37 d8 b7 6d 19 f8 24 7f 3d e5 e1 18 6d d2 06 b3 77 2a e2 b3 0a e4 6a 82 17 2d e1 45 93 bc 68 11 2f da fd 69 79 85 f5 cc 07 47 14 11 f4 a0 ce 77 fb 02 60 bd ea 78 57 97 62 63 36 88 0d 29 92 8f 8e 1b 54 27 ae 1b 30 bf 0b 3f cb aa 14 a7 17 e6 c7 b0 7b c4 b4 ae c1 1d f8 74 ea 53 0f 86 db 83 70 79 0f Data Ascii: =ks8f/g$eYulD"!1E2iEr?~uK"m9]yf,@/4A_,}"6usJ;&\|+'sR%\|r[6cXC9(\|c~i[9tJp9DG)\ij!T-d s-pG;!sL$<5L2^L'3D-J\|\pZY,CL"983uBvkZAq=WmwiQoC7)p?=u=(J+`_cF}ALF4AbTePUP!cACWP4#m9W2xuL9`3{P1.z3l2(j4u0`D$(q:h7E:r~~njS\|\|`a}b&ebDmV7sN#UE'H&`+\fx:l7m$=mwj-Eh/iyGw`xWbc6)T'0?{tSpy
Apr 26, 2024 06:11:21.736569881 CEST	696	OUT	GET /files/main_style.css?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.painrehabilitation.com.au/our-partners.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0
Apr 26, 2024 06:11:21.964519978 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:21 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Access-Control-Allow-Headers: Origin, Authorization, Content-Type Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Origin: * X-Host: grn143.sf2p.intern.weebly.net Content-Encoding: gzip Data Raw: 31 66 37 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 8f e3 46 72 df fd 2b 94 5b 2c 76 e7 22 ca 7a 0c 67 34 33 c8 26 86 0f 38 1f 90 20 41 7c c0 05 48 0e 07 4a ea 19 31 4b 89 32 49 cd ce 78 e1 ff 9e 7e b3 ba bb fa 41 49 eb f3 5d bc 8b b5 67 48 76 75 75 75 75 75 75 bd fa 58 8d 47 35 fd 57 95 e3 d1 76 46 ff cd e9 bf 05 fd 77 4d ff e5 f4 df cd 78 74 68 c8 78 f4 58 37 bb f1 68 55 6f 5e e9 c3 6e 47 9b 6c ca e7 c9 a1 68 8a a7 a6 38 6c e9 ab aa 5e 7f fc e1 58 77 ec e3 92 54 9b 96 74 e3 51 b9 3f 1c bb d1 e7 d1 ae 68 9e ca fd fd 68 fa 30 3a 14 9b 4d b9 7f e2 3f ff f4 d5 f1 74 04 0e 27 77 3a 2a 46 e5 ee 89 7e b1 aa 9b 0d 69 fa a7 9f 47 1d 79 e9 b2 0d 59 d7 4d d1 95 35 6d bc af f7 e4 01 7e 58 1f bb aa dc 13 d5 e8 fe b1 5e 1f 5b da d2 7a ce 30 a5 4f b7 a4 7c da 76 f7 a3 d9 74 fa f6 81 0e 62 df 65 6d f9 23 fd 6a 96 1f 5e e4 83 c7 62 57 56 af f7 a3 77 df 16 ab 72 ff 6e 3c fa a6 29 0b 3a c0 b6 d8 b7 59 4b 9a f2 f1 61 c4 40 67 1a 18 45 a8 58 7f 7c 6a ea e3 7e 73 3f 7a 33 27 ec ef c3 68 5d 57 35 45 f2 cd 72 c6 fe c2 51 8f fe a1 dc 1d ea a6 2b f6 dd 43 4f 17 e3 69 f6 89 ac 3e 96 14 1b 8e e3 ae ae bb 2d 6f 4b 5f 52 6c ca a2 25 1b f3 fb 5d fd 63 fa c7 f5 30 b8 75 fb e2 34 a0 8c f6 da ae 8b 8a 70 fa be f9 44 f9 ee 40 1a 4a e3 4d d9 1e aa 82 12 90 b3 03 7f cb 38 84 be f9 54 6e ba ad 22 3e 9c 0a a3 c7 f0 d4 2b a2 de 2c 8b c5 7a 2e be be df d6 cf bc 6b f5 72 ca ff 08 c4 d6 14 6f 42 51 ef 11 34 26 eb 91 ff c1 3f ed 17 14 c7 c8 ee 5a 70 61 b6 aa bb ae de dd 8f e6 87 97 51 5b 57 e5 c6 40 2e 08 d4 8b b8 04 8d 8c 67 c2 e0 15 94 fd 1a 9b a0 bb e2 25 53 0f 66 d7 53 c6 cf 3d 6b 15 c7 ae 06 1c 78 3d 99 e7 64 37 9a 93 1d eb eb 85 2d 02 fe 5c 0f e9 45 cc db 9c 76 62 2e 8a 7f a3 bf d1 45 40 27 e5 9d b9 80 26 b7 39 83 c6 1f 7d 92 73 7b cb 90 56 83 b8 e6 7f 6c a4 46 33 d6 8a 0d ac a7 cb 67 6b 7d 51 d0 4e b3 b9 d3 ec be 2a da 2e 5b 6f cb 6a 03 a5 8d 1c 3a ff b4 6e bb aa 2e 36 b0 2f 26 f1 d0 17 75 05 a0 cc 26 8c 5c 53 9b 4f 27 9f da b2 23 74 9a 76 99 9c 66 da c6 b3 cc 99 10 d2 f2 b1 9f bb db fc ed 03 36 5c 83 b4 73 4d d9 b6 7b ad e8 a3 b2 a3 6b 75 fd 20 16 49 d7 50 c9 c4 04 f2 fd e8 c8 58 6c 4d 17 b1 a2 57 56 91 47 0a 93 93 cc 15 3a 59 23 ba 74 5e 53 64 ff 65 47 36 65 31 7a 0f d8 ea ee 6e 76 78 b9 1a 7d b6 b8 10 a2 7a cd d8 4e 53 60 a1 78 cc 64 dc 9e ad d4 00 73 f9 11 de ef ed cd ad ea 57 10 bc 25 6b 26 13 32 52 91 1d 25 3a 97 f7 74 21 3d 56 f5 a7 fb d1 b6 dc 6c c8 1e ce cf ee 58 75 25 65 43 b6 9e f8 36 83 33 3c 5c 40 b6 50 b2 85 9a fc ce 43 57 c8 a5 0e cf 40 d2 69 4a 09 06 4b a2 d5 5c 11 cb 24 06 d8 dd b0 e9 64 a2 68 4b 8a 8d e8 b6 a6 2d b9 50 6d 48 45 c5 eb 33 79 30 65 49 57 1f f8 ce 29 b8 67 ea 17 12 3f 66 e5 7e 43 5e 68 bb 85 10 77 3b ba 08 59 3f b6 74 c2 ba 84 82 b8 79 5a 15 ef a7 Data Ascii: 1f71=kFr+[,v"zg43&8 A\|HJ1K2Ix~AI]gHvuuuuuuXG5WvFwMxthxX7hUo^nGlh8l^XwTtQ?hh0:M?t'w:F~iGyYM5m~X^[z0O\|vtbem#j^bWVwrn<):YKa@gEX\|j~s?z3'h]W5ErQ+COi>-oK_Rl%]c0u4pD@JM8Tn">+,z.kroBQ4&?ZpaQ[W@.g%SfS=kx=d7-\Evb.E@'&9}s{VlF3gk}QN.[oj:n.6/&u&\SO'#tvf6\sM{ku IPXlMWVG:Y#t^SdeG6e1znvx}zNS`xdsW%k&2R%:t!=VlXu%eC63<\@PCW@iJK\$dhK-PmHE3y0eIW)g?f~C^hw;Y?tyZ
Apr 26, 2024 06:11:22.268187046 CEST	1012	OUT	POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Content-Length: 83 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 Origin: http://www.painrehabilitation.com.au Referer: http://www.painrehabilitation.com.au/our-partners.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104677.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104677.0.0.0 Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 2c 22 69 64 22 3a 30 7d Data Ascii: {"jsonrpc":"2.0","method":"CustomerAccounts::getAccountDetails","params":[],"id":0}
Apr 26, 2024 06:11:22.528039932 CEST	629	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:22 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn144.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 348 Keep-Alive: timeout=10, max=66 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 30 2c 22 6d 65 74 68 6f 64 22 3a 22 43 75 73 74 6f 6d 65 72 41 63 63 6f 75 6e 74 73 3a 3a 67 65 74 41 63 63 6f 75 6e 74 44 65 74 61 69 6c 73 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 65 76 65 6e 74 22 3a 22 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 64 65 22 3a 22 64 6f 6e 74 53 68 6f 77 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 2c 22 6d 65 73 73 61 67 65 5f 74 6c 22 3a 22 43 75 73 74 6f 6d 65 72 20 61 63 63 6f 75 6e 74 73 20 72 65 73 74 72 69 63 74 65 64 20 6f 72 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 22 7d 2c 22 74 6f 74 61 6c 22 3a 6e 75 6c 6c 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 34 30 31 7d 7d Data Ascii: {"jsonrpc":"2.0","id":0,"method":"CustomerAccounts::getAccountDetails","result":{"success":false,"message":"Customer accounts restricted or not enabled.","event":"","data":{"code":"dontShow","message":"Customer accounts restricted or not enabled.","message_tl":"Customer accounts restricted or not enabled."},"total":null,"http_response_code":401}}
Apr 26, 2024 06:11:25.001097918 CEST	756	OUT	GET /blog.html HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:25.257213116 CEST	609	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:11:25 GMT Server: Apache Vary: X-W-SSL,User-Agent Cache-Control: no-cache, private Location: /blog X-Host: grn102.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 266 Keep-Alive: timeout=10, max=36 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 2f 62 6c 6f 67 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 62 6c 6f 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 62 6c 6f 67 22 3e 2f 62 6c 6f 67 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='/blog'" /> <title>Redirecting to /blog</title> </head> <body> Redirecting to <a href="/blog">/blog</a>. </body></html>
Apr 26, 2024 06:11:25.259845972 CEST	751	OUT	GET /blog HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:25.513457060 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:25 GMT Server: Apache Vary: X-W-SSL,Accept-Encoding,User-Agent Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:25 GMT; Max-Age=1209600; path=/ Cache-Control: private ETag: W/"db41b0715e2e060da0336f68f13e4703-gzip" Content-Encoding: gzip X-Host: grn144.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 8286 Keep-Alive: timeout=10, max=63 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 9f ed 73 ee 7f 40 d9 36 94 1b 51 14 f5 b4 25 cb d9 c4 49 1f 7b 9a c4 1b 27 db bb 27 c9 d5 a1 28 48 62 4c 91 2a 49 59 71 5d fd f7 3b 33 00 f8 90 28 5b b6 93 36 db ba bb 91 49 60 30 33 18 0c 06 33 00 08 1c 7e f5 f4 e5 f1 eb ff 9c 3c 63 93 78 ea 1d ed 1e e2 1f e6 d9 fe b8 a7 71 5f 63 1f a7 9e 1f 75 46 83 9e 36 89 e3 59 c7 34 83 f1 ac 32 e5 a6 1f 99 a3 c1 d7 da d1 ee ce e1 84 db 43 f8 bb 73 18 bb b1 c7 8f 9e 84 6e 34 b0 7d ce 4e 6c d7 67 af f8 c4 1e b8 9e 1b db b1 1b f8 ec 94 87 e7 ae c3 99 c1 9e 78 c1 f8 d0 14 45 0e a7 3c b6 d9 2c 0c 66 3c 8c 2f 7a 5a 30 ee 44 6e cc fb be 3d e5 1a 73 02 3f e6 7e dc d3 b6 c1 ac 31 13 2a b1 8e 8f 08 65 71 01 f9 4d b0 43 1e 39 a1 3b 43 b4 9f 88 ba 3b b5 c7 59 ea 52 96 8b c5 a2 32 03 6c 61 0e 59 c5 09 a6 15 7b 6e ce 67 5e 60 0f 23 d3 32 ab 66 dd 6c 99 56 b5 de aa 5b fb 4d f3 22 18 db c6 cc 0e 63 23 9e 84 9c c3 e3 98 1b b5 ca 87 d9 c6 1a fd 01 f4 ad 3f 99 7e fd 4f a1 bf 08 fe cc da 2b ea 7f 60 db 4f 6d df 1e bb fe d8 c0 b2 c6 c2 8d 27 06 31 34 e5 43 89 42 f0 66 fd e1 72 b9 21 67 5f ae cc fe 40 4d 1e cc c2 c8 00 4b 18 5c 45 72 1e 7a 37 25 38 00 9c 15 1c 49 32 38 b1 a0 c1 7f 9d bb e7 3d dd b1 9d 09 37 10 67 18 78 7a 82 5c f7 03 83 b2 74 2c 06 ff ad 95 d4 8e 05 a8 f1 fa 62 96 15 43 cc 3f c6 26 12 ec 32 67 62 87 11 8f 7b f3 78 64 ec 6b 09 79 1c 4b 7a da b9 cb 17 b3 20 8c 33 45 17 ee 30 9e f4 86 1c ed b7 41 2f 65 e6 fa 6e ec da 9e 11 39 b6 c7 7b 56 a5 5a 9e 42 d2 14 52 e6 2e 8c 79 30 d8 e1 78 e7 b9 fe 19 73 87 80 02 47 2b 63 60 47 dc 88 e2 0b 1c 67 42 ee f5 34 7a 8e 26 9c 03 b9 18 f8 95 6c 3a 51 a4 31 30 5c a3 9e 66 9a ce d0 af 55 50 0f a6 17 88 04 05 88 00 26 be 44 15 78 7a 34 98 bb de f0 b5 0b dc 5b ad 66 bb 5e 6d b7 0f da 42 ac 44 ff ce 94 02 6f 68 8e 6c df b9 18 04 1f 89 a0 d5 6a 34 ea 2d 6b bf 51 fb 94 64 a2 c0 41 89 ba 20 f7 4c bd 62 51 af 94 20 f6 09 1b 28 39 60 d8 fd 32 e8 e1 07 ee 88 81 f8 c6 ac 8c 5c 80 80 ce e7 fa 7d 82 4e 2b d7 6e 5b ad 03 28 87 3e 81 6a bd 78 c2 a7 a0 92 58 3e a1 44 88 74 d3 1c 81 ae 44 95 71 10 8c 3d 6e cf dc 48 55 ea d1 c8 9e ba de 45 ef 18 ba 80 df 69 54 ab e5 36 fc 83 bf d0 1d 3c d7 c1 37 f1 f4 20 9a 0f 50 27 3d e8 25 7e 99 7e 0d 60 57 a7 ba e8 69 5d 74 51 17 5d d5 45 bf 39 2f cf 31 9f 87 a1 1d 2b 86 ee 44 7c f7 90 00 56 b3 8e 76 2b 42 6c dc 03 b1 21 47 e2 d5 0f 62 63 14 04 31 0f 3b f0 58 92 a9 e8 21 f2 30 81 dd 63 43 f7 1c ac 47 68 8f 43 7b 06 Data Ascii: =kw6s@6Q%I{''(HbLIYq];3([6I`033~<cxq_cuF6Y42Csn4}NlgxE<,f</zZ0Dn=s?~1eqMC9;C;YR2laY{ng^`#2flV[M"c#?~O+`Om'14CBfr!g_@MK\Erz7%8I28=7gxz\t,bC?&2gb{xdkyKz 3E0A/en9{VZBR.y0xsG+c`GgB4z&l:Q10\fUP&Dxz4[f^mBDohlj4-kQdA LbQ (9`2\}N+n[(>jxX>DtDq=nHUEiT6<7 P'=%~~`Wi]tQ]E9/1+D\|Vv+Bl!Gbc1;X!0cCGhC{
Apr 26, 2024 06:11:25.537394047 CEST	749	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-three-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:25.850209951 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: image/jpeg Content-Length: 35376 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 19:56:30 GMT x-rgw-object-type: Normal ETag: "5c05636635842ee4c0c164318094f5e7" x-amz-request-id: tx000006a36054f5856ecab-00662b296d-e95274c-sfo1 X-Storage-Bucket: zbd32 X-Storage-Object: bd32f3cab9704bf77f246fbc52aabe16fa2196089c00b6ccd2e3daf923079b1e Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:25.855806112 CEST	767	OUT	GET /files/theme/images/calendar.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/files/main_style.css?1644377169 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.085777998 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:25 GMT Content-Type: image/png; charset=binary Content-Length: 1690 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:56 GMT x-rgw-object-type: Normal ETag: "1f045450638098444665375fa5b56412" x-amz-request-id: tx000009da40f1f052ba933-0065137ee5-db1a051-sfo1 X-Storage-Bucket: zbdcc X-Storage-Object: bdccde3f44f13b0314fa16e7370bf4752f3615d9ce74884e03952b4fad35f866 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 14 08 06 00 00 00 89 7c cd 30 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 33 32 36 42 42 45 35 46 42 41 45 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 33 32 36 42 42 45 36 46 42 41 45 31 31 45 33 41 Data Ascii: PNGIHDR\|0tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE5FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBE6FBAE11E3A
Apr 26, 2024 06:11:26.139297009 CEST	775	OUT	GET /uploads/1/0/3/6/10363185/managing-pain-with-yoga-meditation-part-1-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Referer: http://www.painrehabilitation.com.au/blog Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.457098961 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 47105 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:03:27 GMT x-rgw-object-type: Normal ETag: "52ce31bb4e1610bd5352d781d979fc9f" x-amz-request-id: tx000007bcbc3548ddc7b26-00662b296e-ef1e76d-sfo1 X-Storage-Bucket: z4fbe X-Storage-Object: 4fbedc936f8eed9350bc7ea19aebc3ea8661601a2ded15990a410f6e8ded028c Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49845	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:11.735732079 CEST	662	OUT	GET /uploads/1/0/3/6/10363185/editor/website-photo-heidi-saunders_1.jpg?1491196700 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:12.008076906 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 14336 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:38 GMT x-rgw-object-type: Normal ETag: "0fcc8232a0300117d3fe831fa3b0b0f6" x-amz-request-id: tx00000ed34bd1b8e0781e5-00662b295f-e9549c7-sfo1 X-Storage-Bucket: z9bfb X-Storage-Object: 9bfb4e989156f2ecb90c7c37f3d21079397d29687e2d8bd79f2fe7cf92577849 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 2d 00 bf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 08 05 06 07 01 02 03 04 09 00 ff c4 00 42 10 00 01 03 03 02 03 06 04 05 01 06 05 04 03 01 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 22 41 51 61 32 71 81 91 14 42 a1 b1 c1 23 15 52 62 d1 e1 f0 09 16 33 72 f1 73 82 92 b2 17 25 34 63 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 00 03 05 01 06 ff c4 00 2c 11 00 03 00 02 02 02 01 03 04 01 04 03 00 00 00 00 00 01 02 03 11 12 21 04 31 41 13 22 32 05 51 61 71 23 33 42 a1 d1 24 91 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ea 28 39 aa d5 a9 3b 55 68 c8 5c 0d 78 9a b6 bd 5c d1 0b eb d5 68 35 5c d0 90 ad 7a bd 9a a6 6a 10 ad 7a a9 9a a1 56 01 27 6a 84 2e af 56 ba e7 b4 d9 c1 56 4f a2 41 35 67 e3 da ce 39 b7 fd aa 10 db af 56 ab 77 06 56 f9 63 bc 4f 7c 13 cc 51 9f 16 3d 71 59 f9 c1 e8 41 a8 42 fc d7 ab 1d 54 2b 35 08 5c 4f 95 52 a9 5e a8 43 d5 ea f5 7a a1 0f 57 ab d9 aa 13 83 50 85 6b c4 e2 a9 9a a6 6a 10 a0 e9 57 66 ac 15 70 34 44 2e af 55 01 da ab 91 5c d9 0f 57 aa 99 15 e2 aa e1 0a d5 0a 82 46 49 c0 ab 16 f0 6d 24 a8 e0 01 9a 10 fb 51 76 c7 8f a3 1f 91 a5 f4 b3 e8 55 db 1c b2 6e 5b 2d 31 3f c2 84 f4 53 9f 3d 86 6b 8d e8 ea 4d bd 22 75 e2 97 68 8d 11 c2 26 b9 6f 77 64 aa 7a c6 5a b7 44 1d ec 85 ff 00 ed 1d 07 b9 c0 a1 0f 89 df f1 10 be 4d 75 e8 da 66 d9 12 cb 1b 70 97 a5 1f c4 48 f9 f2 8c 21 3f ad 0b 17 eb fc ab e4 99 32 e5 be f4 89 12 89 5b 8e 3c b2 a7 5c f7 5a bf 8a 65 4f 5a 8b 8b c2 80 1d 30 3f 6a a9 d3 43 13 8d 7c 92 c6 a7 ed 79 c4 5b Data Ascii: JFIFHHCC-"B!1"AQa2qB#Rb3rs%4c,!1A"2Qaq#3B$?(9;Uh\x\h5\zjzV'j.VVOA5g9VwVcO\|Q=qYABT+5\OR^CzWPkjWfp4D.U\WFIm$QvUn[-1?S=kM"uh&owdzZDMufpH!?2[<\ZeOZ0?jC\|y[
Apr 26, 2024 06:11:12.008131981 CEST	79	IN	Data Raw: cc 80 b9 1a a2 e2 d9 48 20 06 1d ee 7f 44 60 7d e9 0e d7 da 9f 88 ec ce 2b 87 a8 ae 6a 75 58 ca d7 25 4a e9 d0 ef 51 a3 16 27 ae 6b ef 5c f0 30 0e 36 1d 7d bd eb 2d c9 f6 ad d1 96 cc 53 dc 37 8c 17 31 83 f5 35 53 ad 8c 28 5f b0 47 69 ee Data Ascii: H D`}+juX%JQ'k\06}-S715S(_Gi
Apr 26, 2024 06:11:12.008148909 CEST	1289	IN	Data Raw: d9 fa d5 84 a1 9b c4 b5 4e 75 20 25 13 52 39 1f 68 83 90 42 86 c7 a9 18 23 a1 c5 4c 3a 1f fe 20 d3 6d ae 88 ba 92 d9 f8 b6 c9 cb 73 a3 2d 29 2b 4f 97 32 71 b2 be 5b 7b 7a f3 5a 45 d2 4a e4 a5 51 55 f8 a2 15 d1 21 61 5f 7f 3a 77 59 e7 dc dd ee 94 Data Ascii: Nu %R9hB#L: ms-)+O2q[{zZEJQU!a_:wYkK`n}M\|KE!JJ4fR+wv7Hk$%2\|Q])6HO>\|Pi\|{T&{Tv?5iIvj5L9>BjjkTj
Apr 26, 2024 06:11:12.008196115 CEST	79	IN	Data Raw: ef 23 83 d4 36 a3 b8 f7 01 5f fd ab 73 1b e3 5a f8 66 06 69 e5 3c be 50 65 25 40 80 47 43 5e cd 69 c6 71 29 6d 23 24 8e 9b d6 7e 7c 8a 6c 43 a3 27 35 50 aa ac e6 fa 55 0a aa 10 bf 38 af 73 56 3e 6d aa 9c db 54 3a 5e da b6 eb 57 f3 56 ba Data Ascii: #6_sZfi<Pe%@GC^iq)m#$~\|lC'5PU8sV>mT:^WV
Apr 26, 2024 06:11:12.008311033 CEST	1127	IN	Data Raw: 15 b5 5d cf 50 13 2a 95 b5 63 53 95 62 94 4f b5 63 52 c2 73 eb fa d4 20 da e2 76 a7 46 94 d1 57 7b a3 aa 09 6e 2c 67 1f 59 3d 02 12 92 4e 7e d8 fa d7 0b 35 fe b4 7a f3 7d ba dc 9e 7c a9 f9 af ad d7 64 3b f1 28 95 13 80 3e b5 d7 8e db b7 d5 59 7b Data Ascii: ]P*cSbOcRs vFW{n,gY=N~5z}\|d;(>Y{4^~:c'n%8bp\|X'U-/I.T-RUOJ?pT2&KGEy44cuX.HI)$$cN[>u
Apr 26, 2024 06:11:12.008409023 CEST	1289	IN	Data Raw: 8c d2 67 60 9b 0c 7b 95 df 5a eb 85 c7 40 7a ef 74 73 b8 59 1b 86 12 48 18 f6 26 a4 5d 47 27 97 bf ed 07 93 1a ba 53 8d b5 fd 36 42 1c 14 97 a8 b8 f5 75 bf cb d6 37 49 13 55 63 ee d4 20 c8 04 04 ad 6a 57 c4 9f 3c 72 e3 06 9c da fa c9 a9 8d b6 f2 Data Ascii: g`{Z@ztsYH&]G'S6Bu7IUc jW<rI96v-NoCe"P,JP0GRq;w@ZkYov%.,<Z}8vH\']k([(*'pq1y
Apr 26, 2024 06:11:12.008425951 CEST	79	IN	Data Raw: 1b 1c ab 27 ed 94 d1 19 64 70 ae 03 79 39 20 63 3f ef e7 4c e1 eb a3 2f 3b db 4c 55 e6 da bd 9d ab 1e 6b d9 34 c8 b1 93 9a ad 2a cd 58 4d 7b 9a a0 45 19 3e 1a b8 9a c4 c1 ca 7a d5 e4 ec 6a 00 62 7c f8 69 06 fe eb 2d 5b de 53 e9 0a 61 29 Data Ascii: 'dpy9 c?L/;LUk4*XM{E>zjb\|i-[Sa)
Apr 26, 2024 06:11:12.008516073 CEST	1289	IN	Data Raw: 25 69 c6 72 3d 31 4b 72 15 84 d3 72 fb fd 62 d3 44 ec a5 67 7f 3c 0c 8f d6 b8 ce 9c 5b ed 31 a3 97 a1 35 75 da cd 19 82 c4 35 4d 5c 86 91 cf cd 84 ab c4 91 8f 4c 29 27 e6 0d 45 92 99 4b 3a 79 2d e7 c4 e8 39 f9 ed 46 a7 6f 8d 14 83 ac 5b 94 d2 39 Data Ascii: %ir=1KrrbDg<[15u5M\L)'EK:y-9Fo[928#0!Dq>?]fnEvJ\oU]79n\|+HW,{r>/C]/KA?P^\|_[xP0_jk0Jl:eqMK~
Apr 26, 2024 06:11:12.008531094 CEST	79	IN	Data Raw: c3 ba 8e 7f 40 3c 85 5d e1 f8 ff 00 52 b9 d7 a4 60 f9 be 4f d3 5f 4e 7d b1 eb 71 d5 77 5d 65 78 7a e9 7d 9a b9 d7 39 49 6c 3a fa c0 c9 09 01 29 fd 00 1f 21 52 77 0e 24 fe 1e ec db dd 03 6f 01 f6 57 fe 2a 0b b5 be 7f 15 82 73 b8 19 fa d4 Data Ascii: @<]R`O_N}qw]exz}9Il:)!Rw$oW*s
Apr 26, 2024 06:11:12.008558035 CEST	1289	IN	Data Raw: c1 a4 5e ee a4 14 0d 81 74 93 9f 41 83 5a 79 df 46 4e 15 b6 75 d7 40 cb 17 5d 2b 6e 5a 94 54 b7 5b 6b 62 31 f9 46 73 ef b5 48 cc 2f 08 c1 f5 a8 9f 83 4f 89 da 6a c2 f8 01 28 54 16 96 94 e7 f3 77 60 64 1f 96 4d 4a 6c 8c 79 ed 57 c3 eb 66 6d fb 66 Data Ascii: ^tAZyFNu@]+nZT[kb1FsH/Oj(Tw`dMJlyWfmfVwjVdV.j6ydQ0v5 lIT{p\|wu_iH\sq[lT]X=K)esJ_~Z?O)l#!_`wiM
Apr 26, 2024 06:11:12.008605003 CEST	79	IN	Data Raw: ee 0f e8 68 f5 ef 02 87 5d eb 90 bd 95 b5 52 6c 5a fa 0b 6f b9 ca db df d0 59 27 18 23 a1 cf b6 68 87 d5 5d b7 75 af 05 78 97 32 c5 a9 ac 11 6e d6 00 e0 72 2b cc a9 4d 3c ec 63 f0 ad 2b 56 52 b2 3a 1f 70 46 d5 5e 0b 7b 78 c1 f2 31 f7 cc Data Ascii: h]RlZoY'#h]ux2nr+M<c+VR:pF^{x1
Apr 26, 2024 06:11:12.208945036 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:11 GMT Content-Type: image/jpeg Content-Length: 14336 Connection: keep-alive Last-Modified: Thu, 14 Mar 2019 18:56:38 GMT x-rgw-object-type: Normal ETag: "0fcc8232a0300117d3fe831fa3b0b0f6" x-amz-request-id: tx00000ed34bd1b8e0781e5-00662b295f-e9549c7-sfo1 X-Storage-Bucket: z9bfb X-Storage-Object: 9bfb4e989156f2ecb90c7c37f3d21079397d29687e2d8bd79f2fe7cf92577849 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 2d 00 bf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 08 05 06 07 01 02 03 04 09 00 ff c4 00 42 10 00 01 03 03 02 03 06 04 05 01 06 05 04 03 01 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 22 41 51 61 32 71 81 91 14 42 a1 b1 c1 23 15 52 62 d1 e1 f0 09 16 33 72 f1 73 82 92 b2 17 25 34 63 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 00 03 05 01 06 ff c4 00 2c 11 00 03 00 02 02 02 01 03 04 01 04 03 00 00 00 00 00 01 02 03 11 12 21 04 31 41 13 22 32 05 51 61 71 23 33 42 a1 d1 24 91 b1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ea 28 39 aa d5 a9 3b 55 68 c8 5c 0d 78 9a b6 bd 5c d1 0b eb d5 68 35 5c d0 90 ad 7a bd 9a a6 6a 10 ad 7a a9 9a a1 56 01 27 6a 84 2e af 56 ba e7 b4 d9 c1 56 4f a2 41 35 67 e3 da ce 39 b7 fd aa 10 db af 56 ab 77 06 56 f9 63 bc 4f 7c 13 cc 51 9f 16 3d 71 59 f9 c1 e8 41 a8 42 fc d7 ab 1d 54 2b 35 08 5c 4f 95 52 a9 5e a8 43 d5 ea f5 7a a1 0f 57 ab d9 aa 13 83 50 85 6b c4 e2 a9 9a a6 6a 10 a0 e9 57 66 ac 15 70 34 44 2e af 55 01 da ab 91 5c d9 0f 57 aa 99 15 e2 aa e1 0a d5 0a 82 46 49 c0 ab 16 f0 6d 24 a8 e0 01 9a 10 fb 51 76 c7 8f a3 1f 91 a5 f4 b3 e8 55 db 1c b2 6e 5b 2d 31 3f c2 84 f4 53 9f 3d 86 6b 8d e8 ea 4d bd 22 75 e2 97 68 8d 11 c2 26 b9 6f 77 64 aa 7a c6 5a b7 44 1d ec 85 ff 00 ed 1d 07 b9 c0 a1 0f 89 df f1 10 be 4d 75 e8 da 66 d9 12 cb 1b 70 97 a5 1f c4 48 f9 f2 8c 21 3f ad 0b 17 eb fc ab e4 99 32 e5 be f4 89 12 89 5b 8e 3c b2 a7 5c f7 5a bf 8a 65 4f 5a 8b 8b c2 80 1d 30 3f 6a a9 d3 43 13 8d 7c 92 c6 a7 ed 79 c4 5b Data Ascii: JFIFHHCC-"B!1"AQa2qB#Rb3rs%4c,!1A"2Qaq#3B$?(9;Uh\x\h5\zjzV'j.VVOA5g9VwVcO\|Q=qYABT+5\OR^CzWPkjWfp4D.U\WFIm$QvUn[-1?S=kM"uh&owdzZDMufpH!?2[<\ZeOZ0?jC\|y[
Apr 26, 2024 06:11:26.294642925 CEST	627	OUT	GET /files/theme/images/comments.png?1644377169 HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104682.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0
Apr 26, 2024 06:11:26.522480011 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/png; charset=binary Content-Length: 1501 Connection: keep-alive Last-Modified: Fri, 14 May 2021 00:21:57 GMT x-rgw-object-type: Normal ETag: "c8c0701a09179919f6bc2f6ee5b74ef6" x-amz-request-id: tx0000004584339ebea2139-00652ef420-db1a132-sfo1 X-Storage-Bucket: z97b2 X-Storage-Object: 97b2893ebbdc56c81a2a238b8ee439f478f4c220752f9af48d751b86cedb468b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 14 08 06 00 00 00 93 40 2d be 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 24 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 33 32 36 42 42 45 39 46 42 41 45 31 31 45 33 41 46 39 43 45 44 34 35 41 41 41 41 42 43 43 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 33 32 36 42 42 45 41 46 42 41 45 31 31 45 33 41 Data Ascii: PNGIHDR@-tEXtSoftwareAdobe ImageReadyqe<$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:6326BBE9FBAE11E3AF9CED45AAAABCCD" xmpMM:DocumentID="xmp.did:6326BBEAFBAE11E3A
Apr 26, 2024 06:11:26.576942921 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.826600075 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:26 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu56.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=72 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49844	199.34.228.58	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:11.736042023 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104667.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104670.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:11.992223024 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:11 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu107.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=73 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:12.193661928 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:11 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu107.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=73 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:26.358556032 CEST	634	OUT	GET /uploads/1/0/3/6/10363185/yoga-part-two-page-2.jpg HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104682.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104685.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:26.630698919 CEST	1289	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:26 GMT Content-Type: image/jpeg Content-Length: 31391 Connection: keep-alive Last-Modified: Wed, 30 Oct 2019 20:02:09 GMT x-rgw-object-type: Normal ETag: "d63b71343e0aeb3b727f0cc7d5c3a2d8" x-amz-request-id: tx00000ea98a048ea2772df-00662b296e-ef1e76d-sfo1 X-Storage-Bucket: z0d0e X-Storage-Object: 0d0e08a986b9b27b58fa1749da4576d1580a63fd981a700d29551ec10ca52e1b Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Origin, Authorization, Content-Type Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 6a 63 70 72 74 00 00 01 68 00 00 00 0b 77 74 70 74 00 00 01 74 00 00 00 14 62 6b 70 74 00 00 01 88 00 00 00 14 72 58 59 5a 00 00 01 9c 00 00 00 14 67 58 59 5a 00 00 01 b0 00 00 00 14 62 58 59 5a 00 00 01 c4 00 00 00 14 72 54 52 43 00 00 01 d8 00 00 00 40 62 54 52 43 00 00 01 d8 00 00 00 40 67 54 52 43 00 00 01 d8 00 00 00 40 64 65 73 63 00 00 00 00 00 00 00 0d 73 52 47 42 20 4d 6f 7a 4a 50 45 47 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 65 78 74 00 00 00 00 50 44 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 58 59 5a 20 00 00 00 00 00 00 03 16 00 00 03 33 00 00 02 a4 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 00 1a 00 00 00 cb 01 c9 03 63 05 92 08 6b 0b f6 10 3f 15 51 1b 34 21 f1 29 90 32 18 3b 92 46 05 51 77 5d ed 6b 70 7a 05 89 b1 9a 7c ac 69 bf 7d d3 c3 e9 30 ff ff ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 Data Ascii: JFIF(ICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdescjcprthwtpttbkptrXYZgXYZbXYZrTRC@bTRC@gTRC@descsRGB MozJPEGtextPDXYZ -XYZ 3XYZ o8XYZ bXYZ $curvck?Q4!)2;FQw]kpz\|i}0&""&0-0>>T
Apr 26, 2024 06:11:26.630732059 CEST	79	IN	Data Raw: 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 02 33 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 Data Ascii: ) )/'%'/9339GDG]]}37
Apr 26, 2024 06:11:26.854881048 CEST	1289	IN	Data Raw: 01 02 08 09 0a 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: QT7y\|K_f;G'b cvN py2#)X#
Apr 26, 2024 06:11:26.854937077 CEST	79	IN	Data Raw: cd 51 0d 6f 7e ce 0a 87 d0 08 f9 f4 f3 9b bb e7 37 56 af 24 7d 1f 1b 69 ed e5 6c 7f 92 fa ff 00 40 fc f7 73 c3 bd 2a f5 47 d2 7c ae 23 9a fd d1 54 be f7 f3 e1 c8 00 1a a0 a4 66 84 61 4c c6 cc 90 c8 08 c2 34 bd 29 9c 97 25 b9 d4 17 e6 3c Data Ascii: Qo~7V$}il@s*G\|#TfaL4)%<
Apr 26, 2024 06:11:26.854975939 CEST	1127	IN	Data Raw: 49 99 d0 07 c8 cf 68 f1 15 b2 e6 36 e3 5e d9 d8 be 85 77 9e 31 cb 27 5c ed eb eb 2d 2f 61 f3 b7 7c dd ea 43 cb ff 00 4f c3 d8 1a b9 b1 3f 3f f4 be c7 f9 5f ac ef a7 9f e1 bf b7 f8 a8 bf 2d dc fe 47 ed 47 cb f4 79 00 1c 1a cc a8 5f 10 e4 b9 6c 5c Data Ascii: Ih6^w1'\-/a\|CO??_-GGy_l\R"/KbKF_.\l.3D<MC:?C>/6e{WQKwi()e@f$*Xd0%O92sW=Yr:nF2O1;
Apr 26, 2024 06:11:27.079243898 CEST	1289	IN	Data Raw: f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Apr 26, 2024 06:11:27.079272985 CEST	79	IN	Data Raw: a6 dc f2 04 33 03 f5 d8 ff 00 5f 6b 4c 14 d4 87 63 b5 ab ee da e1 d6 ae c6 76 f5 70 0b 3b 5a 3c c6 a2 a7 3b 23 0a 80 4c 5a 91 67 6b 47 88 b8 f4 a1 d8 ed 31 e7 6b 44 14 56 17 8c 6c 7a 98 ec 9a 2a 28 c8 7b 3c 78 70 b1 89 d9 b3 1e 9b 5b 93 Data Ascii: 3_kLcvp;Z<;#LZgkG1kDVlz*({<xp[
Apr 26, 2024 06:11:27.079391956 CEST	1289	IN	Data Raw: 76 78 d1 71 ea 57 0f ef ea 2a ed 91 f6 f0 2c bc 4a 62 d3 c5 81 ab 09 d3 ef 7e b1 0b f6 f2 f0 a5 86 47 93 3b 82 cd c6 5f 45 cf f7 2a e3 bf f7 a4 b1 b0 57 02 20 8d 7d 4a 74 13 2d 18 c6 16 db e0 59 82 63 e2 35 7b 84 15 33 a8 cf ae 4d f3 30 3f 5d 8f Data Ascii: vxqW,Jb~G;_EW }Jt-Yc5{3M0?]Wz&&gQ0g0U>lil(9lkXs_VFY5;9w0f1n-ngJ3b72:R]'59DW[%~"zXu!~aH7O@(bX=v?;jz
Apr 26, 2024 06:11:27.133759022 CEST	79	IN	Data Raw: e7 e2 ed 3f 10 4e 16 90 b9 8c 8f c1 ff 00 13 ab 5b 9d ed 7d 21 64 19 c0 0f bb bc 1c 82 ce f3 64 6a bc de 69 b8 32 ad 09 53 ba fa 8d 6d a0 2b f5 23 c5 79 f7 ec 4f 18 f9 96 55 63 ab 8f 50 4e 7c 27 7f f6 1b 23 db 60 b9 40 19 ca 67 7d 5e 81 Data Ascii: ?N[}!ddji2Sm+#yOUcPN\|'#`@g}^
Apr 26, 2024 06:11:27.133821964 CEST	1289	IN	Data Raw: f6 ca f4 ba 32 ad ea 3f e0 98 b3 f0 2c 49 f8 0e 2c fe 1f c3 9f c3 f8 73 f8 7b 0e 7f 0f e1 cf e1 fc 39 fc 3f 89 31 b1 93 16 91 52 b5 61 a3 fa 3e 3d 8f ce 0f 4d a0 6a 2f a4 63 ac 1e 8b 8a 35 29 f4 ca 68 1a 17 fa 65 37 eb 97 e0 b8 c3 53 f0 9c 7f 12 Data Ascii: 2?,I,s{9?1Ra>=Mj/c5)he7SbPX4I'HBpUjXWV);1)#SN!9uiUL>k_Mk/d\|SSJbri86EJ0U.]^v22g
Apr 26, 2024 06:11:27.133912086 CEST	79	IN	Data Raw: 27 1e 18 fc b6 4e 39 fb 9c 48 d9 b8 53 8c 82 08 77 82 79 2f 11 0e 4e 70 e1 83 9c a3 25 80 8b 6a 9e 7a c4 b7 94 99 46 98 23 fb ad a3 a3 f6 84 e3 20 c8 f5 94 4f 03 61 13 68 fd 3f 84 6d 3f 9a e9 e7 88 89 3e 14 53 c2 cc 2a a4 b0 8b 2a c5 ce Data Ascii: 'N9HSwy/Np%jzF# Oah?m?>S**
Apr 26, 2024 06:11:40.171550035 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104686.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104699.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:40.426995993 CEST	373	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:40 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: grn139.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=48 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}
Apr 26, 2024 06:11:46.271811962 CEST	673	OUT	GET /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 Host: www.painrehabilitation.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: is_mobile=0; language=en; _snow_ses.3087=*; _ga=GA1.3.17969918.1714104651; _gid=GA1.3.1928583854.1714104651; _gat=1; _ga_KJ97FGF0R3=GS1.3.1714104654.1.1.1714104700.0.0.0; _snow_id.3087=779f7931-8924-4446-9d94-dbf8da60eead.1714104651.1.1714104705.1714104651.523bbe1b-f3b3-4aa5-bf25-9106b0fb038c
Apr 26, 2024 06:11:46.520646095 CEST	372	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:46 GMT Server: Apache Vary: X-W-SSL,User-Agent X-Host: blu82.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 Content-Length: 93 Keep-Alive: timeout=10, max=41 Connection: Keep-Alive Content-Type: application/json Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 2d 33 32 36 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 52 65 71 75 65 73 74 22 7d 2c 22 69 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"jsonrpc":"2.0","method":null,"error":{"code":-32600,"message":"Invalid Request"},"id":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49855	157.240.14.19	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:26.540616989 CEST	337	OUT	GET /undefined/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:26.689362049 CEST	220	IN	HTTP/1.1 301 Moved Permanently Location: https://connect.facebook.net/undefined/sdk.js Content-Type: text/plain Server: proxygen-bolt Date: Fri, 26 Apr 2024 04:11:26 GMT Connection: keep-alive Content-Length: 0
Apr 26, 2024 06:12:11.695966005 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49856	146.75.124.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:26.543144941 CEST	331	OUT	GET /widgets.js HTTP/1.1 Host: platform.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 06:11:26.691343069 CEST	649	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 27597 Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=1800 Content-Type: application/javascript; charset=utf-8 Etag: "824beb891744db98ccbd3a456e59e0f7+gzip" Content-Encoding: gzip Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:11:26 GMT X-Served-By: cache-iad-kjyo7100044-IAD, cache-mia-kmia1760050-MIA X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
Apr 26, 2024 06:11:26.691382885 CEST	1289	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd e9 7a db 48 92 28 fa ff 3c 05 85 9e 51 01 4d 08 22 29 c9 0b 58 28 8e cb 56 4d 7b c6 db 58 72 f7 37 23 ab f5 41 44 52 44 19 04 d8 58 24 ab 24 9e 87 b8 0f 75 9f eb 46 44 66 02 99 40 82 92 ab aa bb cf b9 33 d5 32 Data Ascii: zH(<QM")X(VM{Xr7#ADRDX$$uFDf@32OU:/,IyVfyqgqO8bi(42`+7Dv]\7eM]{%Y8Xt<e},`gs
Apr 26, 2024 06:11:26.691420078 CEST	1289	IN	Data Raw: 5c e9 c0 4e 43 7b b9 ab 9e 3b e5 0e d9 10 19 42 e3 72 73 c7 91 d7 4b 8a 6b 94 1a 6e 8b d6 6c 67 0a 00 cb 56 3d 31 f6 8d 6f f8 58 5f 60 38 2e e6 5a 80 90 e0 64 32 ec 2e 6b 6d 89 28 f8 a8 5b 1a 2b 60 1b eb c0 5a 96 e5 ba f0 f7 f7 d7 49 58 c2 5a ac Data Ascii: \NC{;BrsKknlgV=1oX_`8.Zd2.km([+`ZIXZv<[#[\`E0Nb,$?C$/'\w1`u2H99]uUPLc"x6q6Y";eAF@9Skww`-n;kM};,K{sa{
Apr 26, 2024 06:11:26.691494942 CEST	1289	IN	Data Raw: 34 2a 18 fa bb ec 06 98 7f 65 dc cc 2d b0 7f a0 af d2 cd 46 52 b1 1b 97 5d f7 ae fc da 34 ad 4d 3f 31 f3 c4 99 36 07 5b 21 28 f1 7b 19 94 cb b8 98 e2 1f a4 89 51 d4 40 32 94 dc 6e 91 ad 5e ce 80 b5 ba 06 84 e7 e2 6f a4 ce 88 8c ed a7 b1 a4 dc af Data Ascii: 4*e-FR]4M?16[!({Q@2n^o`#$r-Y2N?~:nY:jFXa?aR`^9JiCXjRIRe`H+^8z^b'\#@\i"^3W-0]s3,,~
Apr 26, 2024 06:11:26.691533089 CEST	1289	IN	Data Raw: 12 da 4f 97 28 da 45 50 3a 3e 40 3e ea 23 d6 62 20 c8 02 89 9f f7 f7 78 17 ae c4 d3 cc 8e 50 be 44 4a 0b 55 33 11 d9 3b 63 6c 20 17 8c a1 ad 68 e1 df 65 e5 80 a5 59 75 b5 1c 34 a7 d6 1b 00 fd c5 10 93 a1 06 7e ee 38 30 86 19 8c 05 da ae ae 6c d8 Data Ascii: O(EP:>@>#b xPDJU3;cl heYu4~80lmCDki=_xJSNndX;.d@\V`FapE9`:fPEz4r/K;"I+;3=*@4/e~D4 #j
Apr 26, 2024 06:11:26.691586018 CEST	1289	IN	Data Raw: a5 3f 00 55 5b 16 3f c0 49 9d 17 c5 69 1e 12 b0 67 aa 8d 96 94 2d e5 de 65 16 dd 7a 45 79 9b b0 a9 26 fe 24 06 b0 ac eb de df 2b af 6f d8 e5 97 b8 3c 35 7f 5c 65 bf f4 7c c9 fa 6a 28 63 dc b8 1d 25 49 d7 f8 14 70 4c 26 b5 23 68 ba 20 ed a3 05 d9 Data Ascii: ?U[?Iig-ezEy&$+o<5\e\|j(c%IpL&#h C}V D&*.3C,i~[y\|u 3iF6#qi2`]'Fen~)Z4ti&g6,"?#j=)O/(fp;V5e
Apr 26, 2024 06:11:26.691658974 CEST	1289	IN	Data Raw: 7a e4 c0 40 da 11 a0 61 5a 5e fc df 7d cf d1 ff 80 1c 1f ac ef 86 bc f8 f0 3b eb 87 ef f7 f9 a7 1f be 93 ea 13 68 c5 ee 36 61 f1 62 40 f8 51 d5 80 b7 b0 11 de 66 e2 09 43 17 0c b6 d4 6d ac 12 63 0c c7 91 c1 3f 01 fe 76 eb 66 e2 08 a8 05 24 78 b3 Data Ascii: z@aZ^};h6ab@QfCmc?vf$xmtm l3tp7@@X.vSJFU'C>eJ4v]uKe(HG>uo,}:jYpdE=FweL#0X#x@AYz$pua<8jg
Apr 26, 2024 06:11:26.691695929 CEST	1289	IN	Data Raw: eb 14 17 59 a6 ae d2 98 39 33 a3 9f 72 97 f4 d8 d9 61 12 61 c1 e2 43 ff 68 30 45 1e 4c a8 83 9b 15 30 82 59 2a 04 77 be 78 2a 31 ca a1 82 72 10 91 6f 93 0d 4c c4 ec 05 35 f6 5c 58 de 3f e1 8c d4 d3 43 6e 34 84 d4 da 9c 0b dd 23 7c 84 c3 c4 57 2e Data Ascii: Y93raaCh0EL0Ywx1roL5\X?Cn4#\|W.yru0y#;PI\|c57Js6'po`(eU!%iU{,!;,d5S\|)x',_>&9M9`2fe t[-9
Apr 26, 2024 06:11:26.691797972 CEST	1289	IN	Data Raw: 17 08 e7 d5 ee 6e c8 17 af 82 7a 70 e1 12 f0 d7 2f 4b 7a 19 06 96 d4 24 a2 cb c0 7c 16 4a 3c 3c f7 e4 07 c7 0f 81 f6 2d ce 8d a6 00 31 c5 3d 68 68 d4 8e 99 16 1e 3b a3 74 03 ed 9e 50 4a e7 32 25 c2 12 de 79 28 7b 1b 21 19 b9 b1 43 37 72 17 8e 3b Data Ascii: nzp/Kz$\|J<<-1=hh;tPJ2%y({!C7r;R^G>Yq! wq7FxcUVT`t*d\|kd9&O?MO>y:~3Q7&C D"'=20jyjtd/5b92ABr
Apr 26, 2024 06:11:26.691836119 CEST	1289	IN	Data Raw: 7b a2 1c a8 63 24 3b b1 ee 57 79 58 4e 83 b1 fb 22 98 b8 27 c1 1d f9 c0 f9 14 a4 ac a9 f1 91 a8 d2 c6 5e 8a 7b 51 75 c6 76 c2 33 a4 00 b2 3d 51 ac a4 de d9 42 09 9d b6 c0 91 a9 cf bb bb f8 ea 16 75 9e ca db 3a 3c 70 10 5c ce 74 b4 ce c4 51 83 4f Data Ascii: {c$;WyXN"'^{Quv3=QBu:<p\tQO>;gk6`~{2'1oG ^4: cr^-hq\'3:(9FEF@*q:p;\\|;_'lK\|lh7"'HrA
Apr 26, 2024 06:11:26.691935062 CEST	1289	IN	Data Raw: b9 a2 4b 16 e0 12 07 4f c4 98 43 53 11 5c ef 25 fd a6 a4 38 5d 53 00 83 e4 e6 67 29 b9 81 7a 88 88 4e e6 4b 86 99 58 75 bf 7d 98 a4 2c f0 a2 08 d7 da b7 4c 7c 0b f1 43 06 bf d6 59 72 bb 88 13 43 dc 82 86 1e 36 49 08 af 92 ec 32 4c 9c 32 e0 3f 9a Data Ascii: KOCS\%8]Sg)zNKXu},L\|CYrC6I2L2?P;E#>_PO#9\<sG!O1*8GEIFVAe&2}HND~Unp%HWt@"twwD!6O3I"[<hO~296m~'1^Q.qfC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49749	151.101.1.46	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:32.773314953 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49775	35.85.25.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:37.173053026 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49779	35.85.25.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:37.974687099 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49791	54.200.77.207	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:11:39.928942919 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49858	146.75.124.157	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:12:11.664644003 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49857	157.240.14.19	80	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 06:12:11.664650917 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49765	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:10:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 04:10:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=96778 Date: Fri, 26 Apr 2024 04:10:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49769	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:10:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 04:10:51 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: 86D4C1EC23844E65A40A9F1508D7BABF Ref B: BL2EDGE2514 Ref C: 2023-04-05T23:36:05Z Cache-Control: public, max-age=96720 Date: Fri, 26 Apr 2024 04:10:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 04:10:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49770	172.66.0.60	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:10:51 UTC	935	OUT	GET /ajax/apps/generateMap.php?map=google&elementid=384069209770021023&ineditor=0&control=3&width=auto&height=250px&overviewmap=0&scalecontrol=0&typecontrol=0&zoom=15&long=152.96264700000006&lat=-27.555276&domain=www&point=1&align=1&reseller=false HTTP/1.1 Host: www.editmysite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:10:52 UTC	647	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:10:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3b9b97b5b8bff-MIA CF-Cache-Status: DYNAMIC Set-Cookie: sto-id-designer=NPGFBNAK; Domain=editmysite.com; Path=/ X-Host: blu86.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 X-W-DC: SFO Set-Cookie: __cf_bm=jeWMcExAORRyQT4p6XS1fY80KEwENNRhiwIgEvvuAhA-1714104652-1.0.1.1-tnQSW6PC2Qua98rb0clA3Avx6DCUeCov_avAtTQgxtXBU1.rb1uSww_kbHCjcM7aTyhDIAK37xOYQsGM748auA; path=/; expires=Fri, 26-Apr-24 04:40:52 GMT; domain=.editmysite.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 32 64 62 66 0d 0a 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 4d 61 70 73 20 4f 75 74 70 75 74 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 09 09 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 23 6d 61 70 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 09 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0a Data Ascii: 2dbf<!DOCTYPE html><html><head><title>Google Maps Output</title><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"><meta charset="utf-8"><style>html, body, #mapContainer {margin: 0;
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 20 27 30 30 30 27 3b 0a 09 09 09 63 6f 6e 73 74 20 70 72 69 6d 61 72 79 43 6f 6e 74 72 61 73 74 43 6f 6c 6f 72 20 3d 20 27 46 46 46 27 3b 0a 0a 09 09 09 2f 2f 20 73 65 6e 64 20 61 20 63 72 6f 73 73 20 64 6f 6d 61 69 6e 20 69 66 72 61 6d 65 20 6d 65 73 61 67 65 20 74 6f 20 74 68 65 20 70 61 72 65 6e 74 20 74 6f 20 72 65 73 69 7a 65 20 74 68 65 20 66 72 61 6d 65 20 74 6f 20 74 68 69 73 20 68 65 69 67 68 74 0a 09 09 09 76 61 72 20 72 65 73 69 7a 65 4d 65 73 73 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 09 09 09 09 76 61 72 20 69 6d 61 67 65 48 65 69 67 68 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 61 70 43 6f 6e 74 61 69 6e 65 72 27 29 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 0a 0a Data Ascii: '000';const primaryContrastColor = 'FFF';// send a cross domain iframe mesage to the parent to resize the frame to this heightvar resizeMessage = function(event) {var imageHeight = document.getElementById('mapContainer').clientHeight;
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 38 2e 30 37 39 38 20 31 20 32 33 20 35 2e 39 30 32 38 33 20 32 33 20 31 31 2e 39 34 30 33 5a 22 20 66 69 6c 6c 3d 22 23 27 2b 70 69 6e 43 6f 6c 6f 72 2b 27 22 20 73 74 72 6f 6b 65 3d 22 23 27 2b 70 69 6e 42 6f 72 64 65 72 43 6f 6c 6f 72 2b 27 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 32 22 20 63 79 3d 22 31 32 22 20 72 3d 22 36 22 20 66 69 6c 6c 3d 22 23 27 2b 70 69 6e 43 69 72 63 6c 65 43 6f 6c 6f 72 2b 27 22 20 73 74 72 6f 6b 65 3d 22 23 27 2b 70 69 6e 43 69 72 63 6c 65 42 6f 72 64 65 72 43 6f 6c 6f 72 2b 27 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 3c 2f 73 76 67 3e 27 3b 0a 09 09 09 7d 0a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 63 6c 69 63 6b 56 69 65 77 4d 6f 72 65 4c 69 6e 6b Data Ascii: 8.0798 1 23 5.90283 23 11.9403Z" fill="#'+pinColor+'" stroke="#'+pinBorderColor+'" stroke-width="2"/><circle cx="12" cy="12" r="6" fill="#'+pinCircleColor+'" stroke="#'+pinCircleBorderColor+'" stroke-width="2"/></svg>';}function clickViewMoreLink
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 6f 6f 6d 43 6f 6e 74 72 6f 6c 4f 70 74 69 6f 6e 73 20 3d 20 7b 73 74 79 6c 65 3a 20 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 5a 6f 6f 6d 43 6f 6e 74 72 6f 6c 53 74 79 6c 65 2e 53 4d 41 4c 4c 7d 3b 0a 09 09 09 09 09 6d 61 70 4f 70 74 69 6f 6e 73 2e 7a 6f 6f 6d 43 6f 6e 74 72 6f 6c 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2f 20 55 73 65 20 70 72 65 2d 76 33 2e 32 32 20 63 6f 6e 74 72 6f 6c 73 20 75 6e 74 69 6c 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 63 61 6e 20 62 65 20 75 70 64 61 74 65 64 20 77 69 74 68 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 6e 65 77 20 63 6f 6e 74 72 6f 6c 73 0a 09 09 09 09 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 63 6f 6e 74 72 6f 6c 53 74 79 6c 65 20 3d 20 27 61 7a 74 65 63 61 27 3b 0a 0a 09 09 09 09 66 75 6e 63 Data Ascii: oomControlOptions = {style: google.maps.ZoomControlStyle.SMALL};mapOptions.zoomControl = true;}// Use pre-v3.22 controls until the element can be updated with options for the new controlsgoogle.maps.controlStyle = 'azteca';func
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 2c 0a 09 09 09 09 09 09 09 09 09 6d 61 70 3a 20 6d 61 70 2c 0a 09 09 09 09 09 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 34 2c 0a 09 09 09 09 09 09 09 09 09 6f 70 74 69 6d 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 09 09 09 09 09 7a 49 6e 64 65 78 3a 20 69 0a 09 09 09 09 09 09 09 09 7d 29 3b 0a 09 09 09 09 09 09 09 09 62 6f 75 6e 64 73 2e 65 78 74 65 6e 64 28 6d 61 72 6b 65 72 2e 70 6f 73 69 74 69 6f 6e 29 3b 0a 09 09 09 09 09 09 09 09 73 65 74 4d 61 72 6b 65 72 49 63 6f 6e 28 6d 61 72 6b 65 72 2c 20 73 74 72 6f 6b 65 64 4d 61 72 6b 65 72 29 3b 0a 0a 09 09 09 09 09 09 09 09 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 65 76 65 6e 74 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 6d 61 72 6b 65 72 2c 20 27 63 6c 69 63 6b 27 2c 20 28 66 75 6e 63 74 69 6f 6e 20 28 Data Ascii: ,map: map,animation: 4,optimized: false,zIndex: i});bounds.extend(marker.position);setMarkerIcon(marker, strokedMarker);google.maps.event.addListener(marker, 'click', (function (
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 64 65 78 28 69 29 3b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 73 65 74 20 74 68 65 20 69 63 6f 6e 20 66 6f 72 20 74 68 65 20 63 6c 69 63 6b 65 64 20 6d 61 72 6b 65 72 0a 09 09 09 09 09 09 09 09 09 09 6d 61 72 6b 65 72 2e 73 65 74 49 63 6f 6e 28 7b 0a 09 09 09 09 09 09 09 09 09 09 09 75 72 6c 3a 20 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 69 6c 6c 65 64 4d 61 72 6b 65 72 29 2c 0a 09 09 09 09 09 09 09 09 09 09 7d 29 3b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 63 6c 69 63 6b 65 64 20 6d 61 72 6b 65 72 20 6f 6e 20 74 6f 70 0a 09 09 09 09 09 09 09 09 09 09 6d 61 72 6b 65 72 2e 73 65 74 5a 49 6e 64 65 78 28 69 20 2b 20 39 Data Ascii: dex(i);// set the icon for the clicked markermarker.setIcon({url: 'data:image/svg+xml;charset=utf-8,' + encodeURIComponent(filledMarker),});// clicked marker on topmarker.setZIndex(i + 9
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 7d 0a 0a 09 09 09 09 09 09 2f 2f 6e 6f 77 20 66 69 74 20 74 68 65 20 6d 61 70 20 74 6f 20 74 68 65 20 6e 65 77 6c 79 20 69 6e 63 6c 75 73 69 76 65 20 62 6f 75 6e 64 73 0a 09 09 09 09 09 09 6d 61 70 2e 66 69 74 42 6f 75 6e 64 73 28 62 6f 75 6e 64 73 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 0a 09 09 09 09 09 69 66 20 28 61 63 74 69 76 65 4d 61 72 6b 65 72 49 64 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 69 6e 64 65 78 20 3d 20 6d 61 72 6b 65 72 73 2e 66 69 6e 64 49 6e 64 65 78 28 20 78 20 3d 3e 20 78 2e 69 64 20 3d 3d 20 61 63 74 69 76 65 4d 61 72 6b 65 72 49 64 20 29 3b 0a 09 09 09 09 09 09 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 61 72 6b 65 72 73 5b 69 6e 64 65 78 5d 2c 20 27 63 6c 69 63 6b 27 29 3b 0a 09 09 Data Ascii: }//now fit the map to the newly inclusive boundsmap.fitBounds(bounds);}if (activeMarkerId) {var index = markers.findIndex( x => x.id == activeMarkerId );google.maps.event.trigger(markers[index], 'click');
2024-04-26 04:10:52 UTC	1369	IN	Data Raw: 66 3b 0a 09 09 09 09 09 09 09 09 76 61 72 20 63 65 6e 74 65 72 20 3d 20 6d 61 70 2e 67 65 74 43 65 6e 74 65 72 28 29 3b 0a 09 09 09 09 09 09 09 09 76 61 72 20 70 6f 73 74 44 61 74 61 20 3d 20 7b 0a 09 09 09 09 09 09 09 09 09 6c 61 74 3a 20 63 65 6e 74 65 72 2e 6c 61 74 28 29 2c 0a 09 09 09 09 09 09 09 09 09 6c 6e 67 3a 20 63 65 6e 74 65 72 2e 6c 6e 67 28 29 2c 0a 09 09 09 09 09 09 09 09 09 6d 65 73 73 61 67 65 3a 20 27 6d 61 72 6b 65 72 5f 70 6f 73 69 74 69 6f 6e 5f 75 70 64 61 74 65 5f 33 38 34 30 36 39 32 30 39 37 37 30 30 32 31 30 32 33 27 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 6f 73 74 44 61 74 61 29 2c 20 75 Data Ascii: f;var center = map.getCenter();var postData = {lat: center.lat(),lng: center.lng(),message: 'marker_position_update_384069209770021023'}window.parent.postMessage(JSON.stringify(postData), u
2024-04-26 04:10:52 UTC	767	IN	Data Raw: 63 65 20 3d 20 6e 65 77 20 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 4d 61 78 5a 6f 6f 6d 53 65 72 76 69 63 65 28 29 3b 0a 09 09 09 09 09 6d 61 78 5a 6f 6f 6d 53 65 72 76 69 63 65 2e 67 65 74 4d 61 78 5a 6f 6f 6d 41 74 4c 61 74 4c 6e 67 28 7b 0a 09 09 09 09 09 09 6c 61 74 3a 20 70 61 72 73 65 46 6c 6f 61 74 28 2d 32 37 2e 35 35 35 32 37 36 29 2c 0a 09 09 09 09 09 09 6c 6e 67 3a 20 70 61 72 73 65 46 6c 6f 61 74 28 31 35 32 2e 39 36 32 36 34 37 30 30 30 30 30 30 30 36 29 2c 0a 09 09 09 09 09 7d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 73 70 6f 6e 73 65 29 20 20 7b 0a 09 09 09 09 09 09 63 6f 6e 73 74 20 73 75 63 63 65 73 73 20 3d 20 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 20 3d 3d 3d 20 27 4f 4b 27 3b 0a 09 09 09 09 09 09 76 61 72 20 6d 61 78 5a 6f 6f 6d 4c Data Ascii: ce = new google.maps.MaxZoomService();maxZoomService.getMaxZoomAtLatLng({lat: parseFloat(-27.555276),lng: parseFloat(152.96264700000006),}, function (response) {const success = response.status === 'OK';var maxZoomL
2024-04-26 04:10:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49859	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:27 UTC	418	OUT	GET /undefined/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:27 UTC	1677	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: b3a909aba03fb29e8fe0e02a7d318ed6 ETag: "1793ae5b61f547b3535118b304e67d7e" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: s6kJq6A/sp6P4OAqfTGO1g== Expires: Fri, 26 Apr 2024 04:31:27 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-26 04:11:27 UTC	877	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-26 04:11:27 UTC	623	IN	Data Raw: 2f 2a 31 37 31 34 31 30 34 36 38 37 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 33 30 36 38 34 32 39 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 Data Ascii: /1714104687,,JIT Construction: v1013068429,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-04-26 04:11:27 UTC	1500	IN	Data Raw: 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 73 6f 66 74 77 61 72 65 2e 0a 20 2a 0a 20 2a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 2a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 0a 20 2a 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 Data Ascii: portions of the software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SH
2024-04-26 04:11:27 UTC	970	IN	Data Raw: 61 72 65 6e 74 4e 6f 64 65 26 26 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6b 2c 68 29 7d 29 28 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 5c 2f 65 6e 5f 55 53 5c 2f 73 64 6b 2e 6a 73 3f 68 61 73 68 3d 34 31 32 64 34 38 38 31 38 33 64 65 65 64 33 30 61 30 65 64 37 34 36 65 63 62 37 38 66 61 34 31 22 2c 20 31 37 31 34 31 30 34 36 38 37 2c 20 22 46 42 22 2c 20 5b 22 41 70 70 45 76 65 6e 74 73 2e 45 76 65 6e 74 4e 61 6d 65 73 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 73 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 61 63 74 69 76 61 74 65 41 70 70 22 2c 22 41 70 70 45 76 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 56 65 72 73 69 6f 6e 22 2c 22 41 70 Data Ascii: arentNode&&h.parentNode.insertBefore(k,h)})("https:\/\/connect.facebook.net\/en_US\/sdk.js?hash=412d488183deed30a0ed746ecb78fa41", 1714104687, "FB", ["AppEvents.EventNames","AppEvents.ParameterNames","AppEvents.activateApp","AppEvents.clearAppVersion","Ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49860	192.229.163.25	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:27 UTC	804	OUT	GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=http%3A%2F%2Fwww.painrehabilitation.com.au HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:27 UTC	627	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 2754420 Cache-Control: public, max-age=315360000 Content-Type: text/html; charset=utf-8 Date: Fri, 26 Apr 2024 04:11:27 GMT Etag: "81267302efdfb3e4524a22631a8fc99e" Last-Modified: Mon, 11 Dec 2023 17:19:49 GMT P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Server: ECS (mic/9B22) Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ Vary: Accept-Encoding x-amz-server-side-encryption: AES256 X-Cache: HIT x-tw-cdn: VZ Content-Length: 327164 Connection: close
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 74 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 54 77 69 74 74 65 72 20 57 69 64 67 65 74 20 49 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: <!DOCTYPE HTML><meta chartset="utf-8"><title>Twitter Widget Iframe</title><body><script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){v
2024-04-26 04:11:27 UTC	1	IN	Data Raw: 28 Data Ascii: (
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 70 2c 47 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 5a 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 47 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 5a 29 7c 30 3b 76 61 72 20 5f 65 3d 28 63 2b 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 51 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 65 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 51 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 63 3d 28 28 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 65 65 29 7c 30 29 2b 28 69 3e 3e 3e 31 33 29 7c 30 29 2b 28 5f 65 3e 3e 3e 32 36 29 7c 30 2c 5f 65 26 3d 36 37 31 30 38 38 36 33 2c 6e 3d 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 7a 29 2c 69 3d 28 69 3d 4d 61 74 Data Ascii: p,G)\|0,i=(i=i+Math.imul(p,Z)\|0)+Math.imul(b,G)\|0,o=o+Math.imul(b,Z)\|0;var _e=(c+(n=n+Math.imul(u,Q)\|0)\|0)+((8191&(i=(i=i+Math.imul(u,ee)\|0)+Math.imul(d,Q)\|0))<<13)\|0;c=((o=o+Math.imul(d,ee)\|0)+(i>>>13)\|0)+(_e>>>26)\|0,_e&=67108863,n=Math.imul(k,z),i=(i=Mat
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 30 21 3d 3d 6e 2e 6e 65 67 61 74 69 76 65 3b 29 64 2d 2d 2c 6e 2e 6e 65 67 61 74 69 76 65 3d 30 2c 6e 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 69 2c 31 2c 75 29 2c 6e 2e 69 73 5a 65 72 6f 28 29 7c 7c 28 6e 2e 6e 65 67 61 74 69 76 65 5e 3d 31 29 3b 66 26 26 28 66 2e 77 6f 72 64 73 5b 75 5d 3d 64 29 7d 72 65 74 75 72 6e 20 66 26 26 66 2e 73 74 72 69 70 28 29 2c 6e 2e 73 74 72 69 70 28 29 2c 22 64 69 76 22 21 3d 3d 74 26 26 30 21 3d 3d 72 26 26 6e 2e 69 75 73 68 72 6e 28 72 29 2c 7b 64 69 76 3a 66 7c 7c 6e 75 6c 6c 2c 6d 6f 64 3a 6e 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 76 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 28 21 65 2e 69 73 5a 65 72 6f 28 29 29 2c 74 68 69 73 2e 69 73 5a 65 72 6f 28 29 3f 7b 64 Data Ascii: 0!==n.negative;)d--,n.negative=0,n._ishlnsubmul(i,1,u),n.isZero()\|\|(n.negative^=1);f&&(f.words[u]=d)}return f&&f.strip(),n.strip(),"div"!==t&&0!==r&&n.iushrn(r),{div:f\|\|null,mod:n}},o.prototype.divmod=function(e,t,r){return n(!e.isZero()),this.isZero()?{d
2024-04-26 04:11:27 UTC	2	IN	Data Raw: 70 65 Data Ascii: pe
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 6f 66 20 65 29 69 66 28 74 29 7b 69 66 28 22 68 65 78 22 3d 3d 3d 74 29 66 6f 72 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 30 2d 39 5d 2b 2f 67 69 2c 22 22 29 29 2e 6c 65 6e 67 74 68 25 32 21 3d 30 26 26 28 65 3d 22 30 22 2b 65 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 32 29 72 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 65 5b 6e 5d 2b 65 5b 6e 2b 31 5d 2c 31 36 29 29 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 2c 6f 3d 69 3e 3e 38 2c 61 3d 32 35 35 26 69 3b 6f 3f 72 2e 70 75 73 68 28 6f 2c 61 29 3a 72 2e 70 75 73 68 28 61 29 7d 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b Data Ascii: of e)if(t){if("hex"===t)for((e=e.replace(/[^a-z0-9]+/gi,"")).length%2!=0&&(e="0"+e),n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),o=i>>8,a=255&i;o?r.push(o,a):r.push(a)}else for(n=0;n<e.length;
2024-04-26 04:11:27 UTC	1	IN	Data Raw: 66 Data Ascii: f
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 32 2a 72 3b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 72 3e 3e 3e 31 3b 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 7a 28 65 29 2e 6c 65 6e 67 74 68 3b 64 65 66 61 75 6c 74 3a 69 66 28 6e 29 72 65 74 75 72 6e 20 71 28 65 29 2e 6c 65 6e 67 74 68 3b 74 3d 28 22 22 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 65 5b 72 5d 2c 65 5b 72 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 28 6e 3d 72 2c 72 Data Ascii: -16le":return 2*r;case"hex":return r>>>1;case"base64":return z(e).length;default:if(n)return q(e).length;t=(""+t).toLowerCase(),n=!0}}function b(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}function y(e,t,r,n,i){if(0===e.length)return-1;if("string"==typeof r?(n=r,r
2024-04-26 04:11:27 UTC	1	IN	Data Raw: 33 Data Ascii: 3
2024-04-26 04:11:27 UTC	16383	IN	Data Raw: 39 2c 31 39 31 2c 31 38 39 29 3b 69 66 28 69 3d 6e 75 6c 6c 2c 72 3c 31 32 38 29 7b 69 66 28 28 74 2d 3d 31 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 29 7d 65 6c 73 65 20 69 66 28 72 3c 32 30 34 38 29 7b 69 66 28 28 74 2d 3d 32 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 36 7c 31 39 32 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 20 69 66 28 72 3c 36 35 35 33 36 29 7b 69 66 28 28 74 2d 3d 33 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 31 32 7c 32 32 34 2c 72 3e 3e 36 26 36 33 7c 31 32 38 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 7b 69 66 28 21 28 72 3c 31 31 31 34 31 31 32 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b 69 66 28 28 74 2d Data Ascii: 9,191,189);if(i=null,r<128){if((t-=1)<0)break;o.push(r)}else if(r<2048){if((t-=2)<0)break;o.push(r>>6\|192,63&r\|128)}else if(r<65536){if((t-=3)<0)break;o.push(r>>12\|224,r>>6&63\|128,63&r\|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49862	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:27 UTC	625	OUT	GET /en_US/sdk.js?hash=412d488183deed30a0ed746ecb78fa41 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.painrehabilitation.com.au sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:28 UTC	1691	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: b29cb3e4cc90e33a7725d240a0adc31d ETag: "ef9c0c44a44598087c4eb4fdeb1d2e4b" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * content-md5: spyz5MyQ4zp3JdJAoK3DHQ== Expires: Sat, 26 Apr 2025 04:11:28 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" X-Content-Type-Options: nosniff
2024-04-26 04:11:28 UTC	879	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 2f 2a 31 37 31 34 31 30 34 36 38 38 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 33 30 36 38 34 32 39 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 Data Ascii: /1714104688,,JIT Construction: v1013068429,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 20 27 73 65 74 49 6e 74 65 72 76 61 6c 27 2c 20 20 20 20 27 63 6c 65 61 72 54 69 6d 65 6f 75 74 27 2c 20 20 20 20 27 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 27 20 20 5d 3b 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 73 61 6e 64 62 6f 78 53 61 66 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 20 20 20 20 67 6c 6f 62 61 6c 5b 73 61 6e 64 62 6f 78 53 61 66 65 6c 69 73 74 5b 69 5d 5d 20 3d 20 62 69 6e 64 43 6f 6e 74 65 78 74 28 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 73 61 6e 64 62 6f 78 53 61 66 65 6c 69 73 74 5b 69 5d 5d 2c 20 20 20 20 20 20 77 69 6e 64 6f 77 20 20 20 20 29 3b 20 20 7d 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 20 20 20 76 61 72 20 73 65 6c 66 20 3d 20 77 69 6e 64 6f 77 3b 20 20 20 20 76 61 72 20 67 6c Data Ascii: 'setInterval', 'clearTimeout', 'clearInterval' ]; for (var i = 0; i < sandboxSafelist.length; i++) { global[sandboxSafelist[i]] = bindContext( window[sandboxSafelist[i]], window ); } (function() { var self = window; var gl
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 70 70 65 72 2e 67 65 74 43 6f 64 65 55 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 61 2e 5f 5f 62 6f 64 79 57 72 61 70 70 65 72 2e 63 6c 65 61 72 43 6f 64 65 55 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 3d 7b 7d 7d 29 3a 22 74 79 70 65 63 68 65 63 6b 73 22 69 6e 20 5f 5f 74 72 61 6e 73 66 6f 72 6d 5f 69 6e 63 6c 75 64 65 73 3f 61 2e 5f 5f 62 6f 64 79 57 72 61 70 70 65 72 3d 67 3a 61 2e 5f 5f 62 6f 64 79 57 72 61 70 70 65 72 3d 67 29 7d 29 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 Data Ascii: pper.getCodeUsage=function(){return b},a.__bodyWrapper.clearCodeUsage=function(){b={}}):"typechecks"in __transform_includes?a.__bodyWrapper=g:a.__bodyWrapper=g)})(typeof globalThis!=="undefined"?globalThis:typeof global!=="undefined"?global:typeof window!
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 6c 74 22 5d 29 3a 68 2e 64 65 66 61 75 6c 74 45 78 70 6f 72 74 3d 68 2e 65 78 70 6f 72 74 73 3b 68 2e 72 65 73 6f 6c 76 65 64 3d 21 30 3b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 61 3d 6a 28 61 2c 62 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 45 78 70 6f 72 74 21 3d 3d 68 3f 61 2e 64 65 66 61 75 6c 74 45 78 70 6f 72 74 3a 61 2e 65 78 70 6f 72 74 73 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 61 3d 6a 28 61 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 45 78 70 6f 72 74 21 3d 3d 68 3f 61 2e 64 65 66 61 75 6c 74 45 78 70 6f 72 74 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 61 3d 6a 28 61 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d Data Ascii: lt"]):h.defaultExport=h.exports;h.resolved=!0;return h}function k(a,b){a=j(a,b);if(a)return a.defaultExport!==h?a.defaultExport:a.exports}function l(a){a=j(a);if(a)return a.defaultExport!==h?a.defaultExport:null}function m(a){a=j(a);if(a)return a.exports}
2024-04-26 04:11:28 UTC	900	IN	Data Raw: 6e 67 28 61 29 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3a 63 3b 69 73 4e 61 4e 28 65 29 26 26 28 65 3d 30 29 3b 76 61 72 20 66 3d 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 65 2c 30 29 2c 63 29 2c 67 3d 66 2d 64 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 67 3c 30 3f 21 31 3a 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 64 2c 67 29 3d 3d 67 7d 2c 69 6e 63 6c 75 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e Data Ascii: ng(a),e=arguments.length>1?Number(arguments[1]):c;isNaN(e)&&(e=0);var f=Math.min(Math.max(e,0),c),g=f-d.length;return g<0?!1:b.lastIndexOf(d,g)==g},includes:function(a){if(this==null)throw new TypeError("String.prototype.contains called on null or undefin
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3d 3d 3d 2d 31 3f 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 3a 22 40 40 69 74 65 72 61 74 6f 72 22 2c 67 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 68 3d 74 79 70 65 6f 66 20 65 5b 66 5d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 69 3d 30 2c 6a 2c 6b 3b 69 66 28 68 29 7b 6a 3d 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 64 28 29 3a 5b 5d 3b 76 61 72 20 6c 3d 65 5b 66 5d 28 29 2c 6d 3b 77 68 69 6c 65 28 21 28 6d 3d 6c 2e 6e Data Ascii: unction"&&navigator.userAgent.indexOf("Trident/7.0")===-1?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.n
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 29 2d 31 3b 63 3d 2d 31 2a 62 3b 64 3d 7b 69 73 46 69 6e 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 62 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 72 65 74 75 72 6e 20 62 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 29 2c 69 73 4e 61 4e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 62 2e 74 6f 53 Data Ascii: )-1;c=-1*b;d={isFinite:function(a){function b(b){return a.apply(this,arguments)}b.toString=function(){return a.toString()};return b}(function(a){return typeof a==="number"&&isFinite(a)}),isNaN:function(a){function b(b){return a.apply(this,arguments)}b.toS
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 72 6f 74 6f 74 79 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 62 28 22 45 53 35 41 72 72 61 79 22 29 2e 69 73 41 72 72 61 79 2c 68 3d 62 28 22 45 53 35 41 72 72 61 79 50 72 6f 74 6f 74 79 70 65 22 29 2e 69 6e 64 65 78 4f 66 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 28 4d 61 74 68 2e 6d 61 78 28 6a 28 61 29 2c 30 29 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 61 3d 4e 75 6d 62 65 72 28 61 29 3b 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 26 26 61 21 3d 3d 30 3f 6b 28 61 29 2a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 61 29 29 3a 61 7d 66 75 6e 63 74 Data Ascii: rototype"],(function(a,b,c,d,e,f){var g=b("ES5Array").isArray,h=b("ES5ArrayPrototype").indexOf;function i(a){return Math.min(Math.max(j(a),0),Number.MAX_SAFE_INTEGER)}function j(a){a=Number(a);return isFinite(a)&&a!==0?k(a)*Math.floor(Math.abs(a)):a}funct
2024-04-26 04:11:28 UTC	1500	IN	Data Raw: 2c 64 3d 63 5b 74 79 70 65 6f 66 20 67 5d 26 26 67 26 26 21 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2c 65 3d 63 5b 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5d 26 26 77 69 6e 64 6f 77 7c 7c 74 68 69 73 2c 6a 3d 64 26 26 63 5b 74 79 70 65 6f 66 20 68 5d 26 26 68 26 26 21 68 2e 6e 6f 64 65 54 79 70 65 26 26 74 79 70 65 6f 66 20 61 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 3b 6a 26 26 28 6a 2e 67 6c 6f 62 61 6c 3d 3d 3d 6a 7c 7c 6a 2e 77 69 6e 64 6f 77 3d 3d 3d 6a 7c 7c 6a 2e 73 65 6c 66 3d 3d 3d 6a 29 26 26 28 65 3d 6a 29 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 62 2c 61 29 7b 62 7c 7c 28 62 3d 65 2e 4f 62 6a 65 63 74 28 29 29 3b 61 7c 7c 28 61 3d 65 2e 4f 62 6a 65 63 74 28 29 29 3b 76 61 72 20 64 3d 62 2e 4e 75 6d 62 65 72 7c 7c 65 2e 4e 75 6d 62 65 72 2c 67 3d 62 2e Data Ascii: ,d=c[typeof g]&&g&&!g.nodeType&&g,e=c[typeof window]&&window\|\|this,j=d&&c[typeof h]&&h&&!h.nodeType&&typeof a=="object"&&a;j&&(j.global===j\|\|j.window===j\|\|j.self===j)&&(e=j);function k(b,a){b\|\|(b=e.Object());a\|\|(a=e.Object());var d=b.Number\|\|e.Number,g=b.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49863	104.244.42.200	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:28 UTC	620	OUT	GET /settings?session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://platform.twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://platform.twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:29 UTC	567	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:28 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:29 GMT content-length: 870 x-transaction-id: 079ea29164be1054 strict-transport-security: max-age=631138519 access-control-allow-origin: https://platform.twitter.com access-control-allow-credentials: true x-response-time: 5 x-connection-hash: f2e0e19658208dc8673226c12636a9a7f13a5d814c853660c2d76a9e21b781be connection: close
2024-04-26 04:11:29 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49866	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:30 UTC	1233	OUT	GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfb6089b8481d16d69%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F03%2Fhow-can-yoga-help-part-three.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:30 UTC	923	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:30 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:30 UTC	1611	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:30 UTC	107	IN	Data Raw: 62 66 37 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 73 76 67 20 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 Data Ascii: bf7e<!DOCTYPE html><html lang="en" id="facebook" class="no_svg no_js"><head><meta charset="utf-8" /><me
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 4f 52 72 64 4e 33 59 22 3e 5f 5f 44 45 56 5f 5f 3d 30 3b 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 75 4f 52 72 64 4e 33 59 22 3e 2e 5f 33 32 71 61 20 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 5f 35 39 6f 76 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 39 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 30 70 78 3b 77 69 64 74 68 Data Ascii: ta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="uORrdN3Y">__DEV__=0;</script><title>Facebook</title><style nonce="uORrdN3Y">._32qa button{opacity:.4}._59ov{height:100%;height:910px;position:relative;top:-10px;width
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 6f 72 64 5f 62 72 65 61 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 65 6c 6c 69 70 73 69 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 61 65 72 6f 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 68 69 64 64 65 6e 5f 65 6c 65 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 66 61 63 65 62 6f 6f 6b Data Ascii: ord-wrap:break-word}.word_break{display:inline-block}.ellipsis{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.aero{opacity:.5}.column{float:left}.center{margin-left:auto;margin-right:auto}#facebook .hidden_elem{display:none!important}#facebook
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 5f 34 39 76 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 32 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 76 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 33 65 32 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 77 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d Data Ascii: _49ve{border-radius:3px;font-size:11px;height:20px;padding:0 0 0 2px}._2tga._8j9v{border-radius:3px;font-size:11px;height:20px;padding:0 6px}._2tga._3e2a{border-radius:4px;font-size:13px;height:28px;padding:0 4px 0 6px}._2tga._8j9w{border-radius:4px;font-
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 2f 76 33 2f 79 4e 2f 72 2f 73 46 77 6b 79 56 65 68 31 69 55 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 36 31 36 70 78 20 32 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 2e 5f 34 39 76 65 2e 5f 32 74 67 61 2e 69 73 5f 61 6e 69 6d 61 74 69 6e 67 20 2e 5f 33 6a 6e 5f 7b 6c 65 66 74 3a 2d 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 36 70 78 7d 2e 5f 34 39 76 67 2c 2e 5f 35 6e 32 79 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 5f 38 39 6e 5f 2e 5f 34 39 76 65 20 2e 5f 34 39 76 67 2e 5f 38 61 31 39 7b 70 61 64 64 69 6e 67 2d Data Ascii: /v3/yN/r/sFwkyVeh1iU.png) no-repeat;background-position:0 0;background-size:616px 28px;display:inline-block;zoom:1}._49ve._2tga.is_animating ._3jn_{left:-6px;position:relative;top:-6px}._49vg,._5n2y{vertical-align:middle}._89n_._49ve ._49vg._8a19{padding-
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 6f 31 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 36 70 78 7d 2e 5f 36 62 75 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 5f 32 70 69 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 32 70 69 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 32 70 69 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 5f 32 70 69 61 7b 70 61 64 64 69 6e 67 Data Ascii: g-bottom:24px;padding-top:24px}._2o1l{padding-bottom:36px;padding-top:36px}._6bua{padding-left:0;padding-right:0}._2pi7{padding-left:4px;padding-right:4px}._2pi8{padding-left:8px;padding-right:8px}._2pi9{padding-left:12px;padding-right:12px}._2pia{padding
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 65 61 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 63 31 65 32 31 7d 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 Data Ascii: ,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inpu
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 70 78 7d 2e 5f 33 2d 38 76 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 36 62 75 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 35 73 6f 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 5f 33 2d 38 77 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 5f 33 2d 38 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 5f 33 2d 38 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 5f 33 2d 38 7a 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 5f 33 2d 38 2d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 5f 34 61 77 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 2d 6a 7a 7b 6d 61 72 67 69 Data Ascii: px}._3-8v{margin-left:20px;margin-right:20px}._6bu9{margin-left:24px;margin-right:24px}._5soe{margin-top:0}._3-8w{margin-top:4px}._3-8x{margin-top:8px}._3-8y{margin-top:12px}._3-8z{margin-top:16px}._3-8-{margin-top:20px}._4aws{margin-top:24px}._2-jz{margi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49865	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:30 UTC	1231	OUT	GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df8f69f638f7349a7a%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help-part-two.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:30 UTC	923	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:30 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:30 UTC	1612	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:30 UTC	106	IN	Data Raw: 62 66 37 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 73 76 67 20 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d Data Ascii: bf78<!DOCTYPE html><html lang="en" id="facebook" class="no_svg no_js"><head><meta charset="utf-8" /><m
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 44 36 4e 69 30 6a 4a 39 22 3e 5f 5f 44 45 56 5f 5f 3d 30 3b 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 44 36 4e 69 30 6a 4a 39 22 3e 2e 5f 33 32 71 61 20 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 5f 35 39 6f 76 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 39 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 30 70 78 3b 77 69 64 74 Data Ascii: eta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="D6Ni0jJ9">__DEV__=0;</script><title>Facebook</title><style nonce="D6Ni0jJ9">._32qa button{opacity:.4}._59ov{height:100%;height:910px;position:relative;top:-10px;widt
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 6f 72 64 5f 62 72 65 61 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 65 6c 6c 69 70 73 69 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 61 65 72 6f 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 68 69 64 64 65 6e 5f 65 6c 65 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 66 61 63 65 62 6f 6f Data Ascii: word-wrap:break-word}.word_break{display:inline-block}.ellipsis{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.aero{opacity:.5}.column{float:left}.center{margin-left:auto;margin-right:auto}#facebook .hidden_elem{display:none!important}#faceboo
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 2e 5f 34 39 76 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 32 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 76 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 33 65 32 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 77 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 Data Ascii: ._49ve{border-radius:3px;font-size:11px;height:20px;padding:0 0 0 2px}._2tga._8j9v{border-radius:3px;font-size:11px;height:20px;padding:0 6px}._2tga._3e2a{border-radius:4px;font-size:13px;height:28px;padding:0 4px 0 6px}._2tga._8j9w{border-radius:4px;font
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 70 2f 76 33 2f 79 4e 2f 72 2f 73 46 77 6b 79 56 65 68 31 69 55 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 36 31 36 70 78 20 32 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 2e 5f 34 39 76 65 2e 5f 32 74 67 61 2e 69 73 5f 61 6e 69 6d 61 74 69 6e 67 20 2e 5f 33 6a 6e 5f 7b 6c 65 66 74 3a 2d 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 36 70 78 7d 2e 5f 34 39 76 67 2c 2e 5f 35 6e 32 79 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 5f 38 39 6e 5f 2e 5f 34 39 76 65 20 2e 5f 34 39 76 67 2e 5f 38 61 31 39 7b 70 61 64 64 69 6e 67 Data Ascii: p/v3/yN/r/sFwkyVeh1iU.png) no-repeat;background-position:0 0;background-size:616px 28px;display:inline-block;zoom:1}._49ve._2tga.is_animating ._3jn_{left:-6px;position:relative;top:-6px}._49vg,._5n2y{vertical-align:middle}._89n_._49ve ._49vg._8a19{padding
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 6f 31 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 36 70 78 7d 2e 5f 36 62 75 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 5f 32 70 69 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 32 70 69 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 32 70 69 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 5f 32 70 69 61 7b 70 61 64 64 69 6e Data Ascii: ng-bottom:24px;padding-top:24px}._2o1l{padding-bottom:36px;padding-top:36px}._6bua{padding-left:0;padding-right:0}._2pi7{padding-left:4px;padding-right:4px}._2pi8{padding-left:8px;padding-right:8px}._2pi9{padding-left:12px;padding-right:12px}._2pia{paddin
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 65 61 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 63 31 65 32 31 7d 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 Data Ascii: a,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inp
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 36 70 78 7d 2e 5f 33 2d 38 76 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 36 62 75 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 35 73 6f 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 5f 33 2d 38 77 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 5f 33 2d 38 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 5f 33 2d 38 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 5f 33 2d 38 7a 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 5f 33 2d 38 2d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 5f 34 61 77 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 2d 6a 7a 7b 6d 61 72 67 Data Ascii: 6px}._3-8v{margin-left:20px;margin-right:20px}._6bu9{margin-left:24px;margin-right:24px}._5soe{margin-top:0}._3-8w{margin-top:4px}._3-8x{margin-top:8px}._3-8y{margin-top:12px}._3-8z{margin-top:16px}._3-8-{margin-top:20px}._4aws{margin-top:24px}._2-jz{marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49864	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:30 UTC	1222	OUT	GET /v2.6/plugins/like.php?action=like&app_id=190291501407&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfe201db235e547120%26domain%3Dwww.painrehabilitation.com.au%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.painrehabilitation.com.au%252Ffe79921c150d04595%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.painrehabilitation.com.au%2F1%2Fpost%2F2018%2F02%2Fhow-can-yoga-help.html&layout=button_count&locale=en_US&sdk=joey&share=false&show_faces=false&width=90 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:30 UTC	923	IN	HTTP/1.1 200 OK Vary: Accept-Encoding reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:30 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:30 UTC	1612	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:30 UTC	106	IN	Data Raw: 36 31 62 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 73 76 67 20 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d Data Ascii: 61b1<!DOCTYPE html><html lang="en" id="facebook" class="no_svg no_js"><head><meta charset="utf-8" /><m
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 47 76 57 6e 69 78 32 22 3e 5f 5f 44 45 56 5f 5f 3d 30 3b 3c 2f 73 63 72 69 70 74 3e 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 70 47 76 57 6e 69 78 32 22 3e 2e 5f 33 32 71 61 20 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 5f 35 39 6f 76 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 39 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 30 70 78 3b 77 69 64 74 Data Ascii: eta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="pGvWnix2">__DEV__=0;</script><title>Facebook</title><style nonce="pGvWnix2">._32qa button{opacity:.4}._59ov{height:100%;height:910px;position:relative;top:-10px;widt
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 6f 72 64 5f 62 72 65 61 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 65 6c 6c 69 70 73 69 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 61 65 72 6f 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 68 69 64 64 65 6e 5f 65 6c 65 6d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 66 61 63 65 62 6f 6f Data Ascii: word-wrap:break-word}.word_break{display:inline-block}.ellipsis{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.aero{opacity:.5}.column{float:left}.center{margin-left:auto;margin-right:auto}#facebook .hidden_elem{display:none!important}#faceboo
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 2e 5f 34 39 76 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 32 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 76 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 33 65 32 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 20 30 20 36 70 78 7d 2e 5f 32 74 67 61 2e 5f 38 6a 39 77 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 Data Ascii: ._49ve{border-radius:3px;font-size:11px;height:20px;padding:0 0 0 2px}._2tga._8j9v{border-radius:3px;font-size:11px;height:20px;padding:0 6px}._2tga._3e2a{border-radius:4px;font-size:13px;height:28px;padding:0 4px 0 6px}._2tga._8j9w{border-radius:4px;font
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 70 2f 76 33 2f 79 4e 2f 72 2f 73 46 77 6b 79 56 65 68 31 69 55 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 36 31 36 70 78 20 32 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 2e 5f 34 39 76 65 2e 5f 32 74 67 61 2e 69 73 5f 61 6e 69 6d 61 74 69 6e 67 20 2e 5f 33 6a 6e 5f 7b 6c 65 66 74 3a 2d 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 36 70 78 7d 2e 5f 34 39 76 67 2c 2e 5f 35 6e 32 79 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 5f 38 39 6e 5f 2e 5f 34 39 76 65 20 2e 5f 34 39 76 67 2e 5f 38 61 31 39 7b 70 61 64 64 69 6e 67 Data Ascii: p/v3/yN/r/sFwkyVeh1iU.png) no-repeat;background-position:0 0;background-size:616px 28px;display:inline-block;zoom:1}._49ve._2tga.is_animating ._3jn_{left:-6px;position:relative;top:-6px}._49vg,._5n2y{vertical-align:middle}._89n_._49ve ._49vg._8a19{padding
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 6f 31 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 36 70 78 7d 2e 5f 36 62 75 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 5f 32 70 69 37 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 32 70 69 38 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 32 70 69 39 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 5f 32 70 69 61 7b 70 61 64 64 69 6e Data Ascii: ng-bottom:24px;padding-top:24px}._2o1l{padding-bottom:36px;padding-top:36px}._6bua{padding-left:0;padding-right:0}._2pi7{padding-left:4px;padding-right:4px}._2pi8{padding-left:8px;padding-right:8px}._2pi9{padding-left:12px;padding-right:12px}._2pia{paddin
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 65 61 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 63 31 65 32 31 7d 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 Data Ascii: a,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inp
2024-04-26 04:11:30 UTC	1500	IN	Data Raw: 36 70 78 7d 2e 5f 33 2d 38 76 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 5f 36 62 75 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 7d 2e 5f 35 73 6f 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 5f 33 2d 38 77 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 5f 33 2d 38 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 5f 33 2d 38 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 5f 33 2d 38 7a 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 5f 33 2d 38 2d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 5f 34 61 77 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 5f 32 2d 6a 7a 7b 6d 61 72 67 Data Ascii: 6px}._3-8v{margin-left:20px;margin-right:20px}._6bu9{margin-left:24px;margin-right:24px}._5soe{margin-top:0}._3-8w{margin-top:4px}._3-8x{margin-top:8px}._3-8y{margin-top:12px}._3-8z{margin-top:16px}._3-8-{margin-top:20px}._4aws{margin-top:24px}._2-jz{marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49868	146.75.124.157	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:30 UTC	577	OUT	GET /js/button.856debeac157d9669cf51e73a08fbc93.js HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:30 UTC	619	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7884 Last-Modified: Mon, 11 Dec 2023 17:19:47 GMT ETag: "fdf02dd038ed38dbf3c240d56262af0c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=315360000 Content-Type: application/javascript; charset=utf-8 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:11:30 GMT X-Served-By: cache-iad-kjyo7100074-IAD, cache-mia-kmia1760095-MIA X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
2024-04-26 04:11:30 UTC	912	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 6c 6c 3d 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 6c 6c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 31 36 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 39 29 2c 61 3d 6e 28 31 36 32 29 2c 73 3d 6e 28 37 29 3b 28 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 29 29 2e 62 75 69 6c 64 3d 73 28 72 2e 62 75 69 6c 64 2c 6e 75 6c 6c 2c 61 29 2c 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 31 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 31 29 2c 61 3d 6e 28 33 37 29 2c 73 3d 6e 28 33 34 29 2c 69 3d 6e 28 33 38 29 2c 6f 3d 6e 28 30 29 2c 75 3d 6e 28 37 29 2c 63 3d 6e 28 33 33 29 2c 6c 3d 6e 28 35 29 2c 68 3d 6e 28 31 36 35 29 3b 74 2e 65 78 Data Ascii: (window.__twttrll=window.__twttrll\|\|[]).push([[2],{160:function(t,e,n){var r=n(39),a=n(162),s=n(7);(r=Object.create(r)).build=s(r.build,null,a),t.exports=r},161:function(t,e,n){var r=n(71),a=n(37),s=n(34),i=n(38),o=n(0),u=n(7),c=n(33),l=n(5),h=n(165);t.ex
2024-04-26 04:11:30 UTC	1379	IN	Data Raw: 6f 6e 49 64 7d 3b 74 3d 6f 2e 61 75 67 28 61 2e 73 63 72 69 62 65 4e 61 6d 65 73 70 61 63 65 28 29 2c 74 7c 7c 7b 7d 29 2c 65 3d 6f 2e 61 75 67 28 61 2e 73 63 72 69 62 65 44 61 74 61 28 29 2c 65 7c 7c 7b 7d 29 2c 72 2e 63 6c 69 65 6e 74 45 76 65 6e 74 28 74 2c 65 2c 21 31 2c 6e 2c 69 29 7d 29 7d 29 2c 74 2e 64 65 66 69 6e 65 28 22 73 63 72 69 62 65 49 6e 74 65 72 61 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 61 2e 65 78 74 72 61 63 74 54 65 72 6d 73 46 72 6f 6d 44 4f 4d 28 74 2e 74 61 72 67 65 74 29 3b 72 65 74 75 72 6e 20 72 2e 61 63 74 69 6f 6e 3d 74 2e 74 79 70 65 2c 22 75 72 6c 22 3d 3d 3d 72 2e 65 6c 65 6d 65 6e 74 26 26 28 72 2e 65 6c 65 6d 65 6e 74 3d 61 2e 63 6c 69 63 6b 45 76 65 6e 74 45 6c 65 6d 65 6e Data Ascii: onId};t=o.aug(a.scribeNamespace(),t\|\|{}),e=o.aug(a.scribeData(),e\|\|{}),r.clientEvent(t,e,!1,n,i)})}),t.define("scribeInteraction",function(t,e,n){var r=a.extractTermsFromDOM(t.target);return r.action=t.type,"url"===r.element&&(r.element=a.clickEventElemen
2024-04-26 04:11:30 UTC	1379	IN	Data Raw: 6f 70 28 29 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 2c 73 3d 74 68 69 73 2e 65 6c 3b 74 68 69 73 2e 65 6c 26 26 28 74 3d 28 74 7c 7c 22 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 2c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 6e 3d 65 3a 72 3d 65 2c 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 5b 72 5d 7c 7c 72 2c 6e 3d 6f 28 6e 2c 74 68 69 73 29 2c 74 2e 66 6f 72 45 61 63 68 28 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 2e 64 65 6c 65 67 61 74 65 28 73 2c 74 2c 72 2c 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 31 29 7d 29 29 7d 7d 29 2c 65 7d 7d 2c 31 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e Data Ascii: op()},on:function(t,e,n){var r,s=this.el;this.el&&(t=(t\|\|"").split(/\s+/),2===arguments.length?n=e:r=e,r=this.selectors[r]\|\|r,n=o(n,this),t.forEach(r?function(t){a.delegate(s,t,r,n)}:function(t){s.addEventListener(t,n,!1)}))}}),e}},164:function(t,e){var n
2024-04-26 04:11:30 UTC	1379	IN	Data Raw: 22 7d 74 2e 65 78 70 6f 72 74 73 3d 61 2e 63 6f 75 70 6c 65 28 6e 28 31 36 31 29 2c 6e 28 31 36 36 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 61 72 61 6d 73 28 7b 73 63 72 65 65 6e 4e 61 6d 65 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 6c 61 6e 67 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 70 2e 6d 61 74 63 68 4c 61 6e 67 75 61 67 65 2c 66 61 6c 6c 62 61 63 6b 3a 22 65 6e 22 7d 2c 73 69 7a 65 3a 7b 66 61 6c 6c 62 61 63 6b 3a 22 6d 65 64 69 75 6d 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 67 7d 2c 73 68 6f 77 53 63 72 65 65 6e 4e 61 6d 65 3a 7b 66 61 6c 6c 62 61 63 6b 3a 21 30 7d 2c 73 68 6f 77 43 6f 75 6e 74 3a 7b 66 61 6c 6c 62 61 63 6b 3a 21 30 7d 2c 70 61 72 74 6e 65 72 3a 7b 66 61 6c 6c 62 61 63 6b 3a 6c 28 73 2e 76 61 Data Ascii: "}t.exports=a.couple(n(161),n(166),function(t){t.params({screenName:{required:!0},lang:{required:!0,transform:p.matchLanguage,fallback:"en"},size:{fallback:"medium",transform:g},showScreenName:{fallback:!0},showCount:{fallback:!0},partner:{fallback:l(s.va
2024-04-26 04:11:30 UTC	1379	IN	Data Raw: 73 3d 6e 28 37 33 29 2c 69 3d 22 74 66 77 5f 6c 65 67 61 63 79 5f 74 69 6d 65 6c 69 6e 65 5f 73 75 6e 73 65 74 22 2c 6f 3d 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 2c 75 3d 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 72 2e 63 6f 75 70 6c 65 28 6e 28 31 37 32 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 64 65 66 69 6e 65 28 22 69 73 54 69 6d 65 6c 69 6e 65 53 75 6e 73 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 44 61 74 61 2e 66 65 61 74 75 72 65 73 2c 65 3d 73 2e 67 65 74 48 6f 73 74 6e 61 6d 65 28 61 2e 72 6f 6f 74 44 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 28 29 29 2c 6e 3d 74 26 26 74 5b 6f 5d 26 26 74 Data Ascii: s=n(73),i="tfw_legacy_timeline_sunset",o="tfw_timeline_list",u="tfw_follower_count_sunset";t.exports=r.couple(n(172),function(t){t.define("isTimelineSunset",function(){var t=this.settingsData.features,e=s.getHostname(a.rootDocumentLocation()),n=t&&t[o]&&t
2024-04-26 04:11:30 UTC	1379	IN	Data Raw: 61 2c 72 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 72 65 6c 61 74 65 64 2c 69 3d 63 2e 67 65 74 53 63 72 65 65 6e 4e 61 6d 65 46 72 6f 6d 50 61 67 65 28 29 3b 72 65 74 75 72 6e 22 73 68 61 72 65 22 3d 3d 3d 74 68 69 73 2e 70 61 72 61 6d 73 2e 74 79 70 65 3f 28 74 3d 74 7c 7c 61 2e 74 69 74 6c 65 2c 65 3d 65 7c 7c 63 2e 67 65 74 43 61 6e 6f 6e 69 63 61 6c 55 52 4c 28 29 7c 7c 73 2e 68 72 65 66 2c 6e 3d 6e 7c 7c 69 29 3a 69 26 26 28 72 3d 72 3f 69 2b 22 2c 22 2b 72 3a 69 29 2c 6c 2e 63 6f 6d 70 61 63 74 28 7b 69 64 3a 74 68 69 73 2e 69 64 2c 6c 61 6e 67 3a 74 68 69 73 2e 70 61 72 61 6d 73 2e 6c 61 6e 67 2c 73 69 7a 65 3a 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 69 7a 65 2c 74 79 70 65 3a 74 68 69 73 2e 70 61 72 61 6d 73 2e 74 79 70 65 2c 74 65 78 74 3a 74 2c 75 Data Ascii: a,r=this.params.related,i=c.getScreenNameFromPage();return"share"===this.params.type?(t=t\|\|a.title,e=e\|\|c.getCanonicalURL()\|\|s.href,n=n\|\|i):i&&(r=r?i+","+r:i),l.compact({id:this.id,lang:this.params.lang,size:this.params.size,type:this.params.type,text:t,u
2024-04-26 04:11:30 UTC	77	IN	Data Raw: 31 29 2c 6e 28 31 38 32 29 5d 29 7d 2c 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 30 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 2e 62 75 69 6c 64 28 5b 6e 28 31 39 39 29 5d 29 7d 7d 5d 29 3b Data Ascii: 1),n(182)])},81:function(t,e,n){var r=n(160);t.exports=r.build([n(199)])}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49869	104.244.42.136	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:30 UTC	407	OUT	GET /settings?session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	468	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:30 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:31 GMT content-length: 870 x-transaction-id: 5c0ad0518d77adc7 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 57e742cdce36a8aba3405147fa9dbf4b91c3834d1e0339dba1e3dc02c49cfd3a connection: close
2024-04-26 04:11:31 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49871	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	611	OUT	GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OIlAxCmR79nrM/Ez4ygGlg== Expires: Fri, 25 Apr 2025 13:32:06 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: oSHF2i8BtT2aLls5g3hzqSXPPCSSs8UlW/yq3ru2KJYHY0bpYSwpes4CdLd/RYIzSFbRlR4690CmmuA2dDQ9bQ== Date: Fri, 26 Apr 2024 04:11:31 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 299
2024-04-26 04:11:31 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:31 UTC	298	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 60 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7c 25 1c ba 00 00 00 1f 74 52 4e 53 00 f0 fc 01 fe 21 c5 5c 34 f5 e1 fa e6 76 ab 1b 32 a8 f8 e8 29 14 d9 ee a0 fb 7e de fd eb 1e 43 49 7d 1d 00 00 00 5b 49 44 41 54 78 da 95 cd 47 0a c0 30 0c 44 51 b9 a5 f7 de e7 fe b7 0c 8e b1 b1 03 59 64 76 ff 21 10 7d 2f 6a c3 16 39 c6 00 62 40 f9 9d a4 c8 84 d7 75 01 94 e4 ad c2 b3 b9 d1 c1 c0 a8 33 d0 0f 1a 00 90 34 Data Ascii: PNGIHDR(-S`PLTE\|%tRNS!\4v2)~CI}[IDATxG0DQYdv!}/j9b@u34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49870	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	609	OUT	GET /rsrc.php/v3iEpO4/yy/l/en_US/JEeFeYKiBmD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	1773	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PdqNpN/pJzukga5iK8Togg== Expires: Sat, 26 Apr 2025 04:11:31 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: gzudqi7akHcwiN9WHGOeyFrJjbGBjO0pnPBl4L/Y7MnzrKKTlPUykcXmhLEFEXCvlPgqz0IZOYSVPTFr5W+G1A== Date: Fri, 26 Apr 2024 04:11:31 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3414, tp=-1, tpl=-1, uplat=56, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 547361
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 Data Ascii: ;/FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__liste
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 74 28 61 29 7d 63 61 74 63 68 28 61 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 7d 29 7d 66 26 26 66 2e 6f 6e 63 65 26 26 63 5b 22 64 65 6c 65 74 65 22 5d 28 67 29 7d 72 65 74 75 72 6e 21 30 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 63 3d 7b 7d 3b 61 2e 41 62 6f 72 74 53 69 67 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 61 21 3d 3d 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 22 29 3b 62 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 5f 61 62 6f 72 74 65 64 3d 21 31 7d 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 2e 70 72 6f 74 6f 74 Data Ascii: t(a)}catch(a){setTimeout(function(){throw a})}f&&f.once&&c["delete"](g)}return!0};return a}(),c={};a.AbortSignal=function(){function a(a){if(a!==c)throw new TypeError("Illegal constructor.");b.call(this);this._aborted=!1}a.prototype=Object.create(b.protot
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 62 61 63 6b 20 66 75 6e 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 61 62 6c 65 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2c 61 5b 64 5d 2c 64 2c 61 29 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 65 29 3a 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 61 74 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 74 68 69 73 3b 72 65 74 75 Data Ascii: (typeof b!=="function")throw new TypeError("Callback function must be callable.");for(var d=0;d<a.length;d++){var e=b.call(a,a[d],d,a);Array.isArray(e)?c.push.apply(c,e):c.push(e)}return c};Array.prototype.flatMap=function(a){var c=arguments[1]\|\|this;retu
2024-04-26 04:11:31 UTC	1315	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 29 7d 29 28 29 3b 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 3d 6e 75 6c 6c 26 26 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 61 2e 63 61 6c 6c 28 62 2c 65 2c 64 2c 63 29 Data Ascii: ray.prototype[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]=Array.prototype.values)})();"use strict";Array.prototype.findLast==null&&(Array.prototype.findLast=function(a,b){var c=this;for(var d=c.length-1;d>=0;d--){var e=c[d],f=a.call(b,e,d,c)
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 3b 74 79 70 65 6f 66 20 62 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 28 63 2e 73 69 67 6e 61 74 75 72 65 3d 62 29 3b 72 65 74 75 72 6e 20 63 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 28 61 26 26 2f 5e 5b 41 2d 5a 5d 2f 2e 74 65 73 74 28 61 29 3f 61 3a 76 6f 69 64 20 30 2c 62 26 26 28 62 2e 70 61 72 61 6d 73 26 26 62 2e 70 61 72 61 6d 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 72 65 74 75 72 6e 73 29 3f 22 66 75 6e 63 74 69 6f 6e 28 22 2b 28 62 2e 70 61 72 61 6d 73 3f 62 2e 70 61 72 61 6d 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 61 2e 72 65 70 6c 61 63 65 28 22 3f 22 2c 22 22 29 3a 61 7d 29 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 2b 22 29 Data Ascii: ;typeof b!=="undefined"&&(c.signature=b);return c},d=function(a,b){return c(a&&/^[A-Z]/.test(a)?a:void 0,b&&(b.params&&b.params.length\|\|b.returns)?"function("+(b.params?b.params.map(function(a){return/\?/.test(a)?"?"+a.replace("?",""):a}).join(","):"")+")
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 64 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 73 65 6c 66 2e 5f 5f 44 45 56 5f 5f 3d 73 65 6c 66 2e 5f 5f 44 45 56 5f 5f 7c 7c 30 2c 73 65 6c 66 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 0a 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 6b 65 79 73 22 2c 64 3d 22 76 61 6c 75 65 73 22 2c 65 3d 22 65 6e 74 72 69 65 73 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 28 41 72 72 61 79 29 2c 62 3b 61 7c 7c 28 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 74 68 69 73 2e 24 31 3d 61 2c 74 68 69 73 2e 24 32 3d 62 Data Ascii: d"?this:typeof self!=="undefined"?self:{});self.__DEV__=self.__DEV__\|\|0,self.emptyFunction=function(){};(function(a,b){var c="keys",d="values",e="entries",f=function(){var a=h(Array),b;a\|\|(b=function(){"use strict";function a(a,b){this.$1=a,this.$2=b
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 20 69 6d 70 6c 65 6d 65 6e 74 20 6b 65 79 73 2e 22 29 7d 2c 76 61 6c 75 65 73 3a 61 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 61 29 7d 2c 65 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 74 72 69 6e 67 73 20 64 65 66 61 75 6c 74 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 6e 27 74 20 69 6d 70 6c 65 6d 65 6e 74 20 65 6e 74 72 69 65 73 2e 22 29 7d 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: implement keys.")},values:a?function(a){return a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]()}:function(a){return new b(a)},entries:function(){throw TypeError("Strings default iterator doesn't implement entries.")}}}();function h(a){return
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 46 42 5f 65 6e 75 6d 65 72 61 74 65 3d 6b 7d 29 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 74 68 69 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 0a 0a 0a 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 45 6c 65 6d 65 6e 74 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 62 3d Data Ascii: FB_enumerate=k})(typeof global==="object"?global:typeof this==="object"?this:typeof window==="object"?window:typeof self==="object"?self:{});"use strict";(function(){if(typeof Element==="undefined"\|\|Element.prototype.scroll)return;function a(a,b){b=
2024-04-26 04:11:31 UTC	910	IN	Data Raw: 72 20 62 3d 2f 5c 75 32 30 32 38 2f 67 2c 63 3d 2f 5c 75 32 30 32 39 2f 67 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 64 3d 61 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 2c 66 29 3b 64 26 26 28 2d 31 3c 64 2e 69 6e 64 65 78 4f 66 28 22 5c 75 32 30 32 38 22 29 26 26 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 62 2c 22 5c 5c 75 32 30 32 38 22 29 29 2c 2d 31 3c 64 2e 69 6e 64 65 78 4f 66 28 22 5c 75 32 30 32 39 22 29 26 26 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 63 2c 22 5c 5c 75 32 30 32 39 22 29 29 29 3b 72 65 74 75 72 6e 20 64 7d 7d 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 29 7d 29 28 29 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: r b=/\u2028/g,c=/\u2029/g;return function(d,e,f){d=a.call(this,d,e,f);d&&(-1<d.indexOf("\u2028")&&(d=d.replace(b,"\\u2028")),-1<d.indexOf("\u2029")&&(d=d.replace(c,"\\u2029")));return d}}(JSON.stringify))})();(function(){var a=Object.prototype.hasOwnPro
2024-04-26 04:11:31 UTC	1500	IN	Data Raw: 5f 5f 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 53 4d 6d 65 74 61 3d 62 3b 72 65 74 75 72 6e 20 61 7d 7d 29 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 74 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 0a 0a 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 7c 7c 28 53 74 Data Ascii: __m=function(a,b){a.__SMmeta=b;return a}})(typeof globalThis!=="undefined"?globalThis:typeof global!=="undefined"?global:typeof window!=="undefined"?window:typeof this!=="undefined"?this:typeof self!=="undefined"?self:{});String.prototype.contains\|\|(St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49872	192.229.163.25	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	756	OUT	GET /widgets/tweet_button.2f70fb173b9000da126c79afe2098f02.en.html HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	626	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 2754418 Cache-Control: public, max-age=315360000 Content-Type: text/html; charset=utf-8 Date: Fri, 26 Apr 2024 04:11:31 GMT Etag: "e29e65db7bf0a096587728e1faacfd9c" Last-Modified: Mon, 11 Dec 2023 17:19:48 GMT P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Server: ECS (mic/9B13) Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ Vary: Accept-Encoding x-amz-server-side-encryption: AES256 X-Cache: HIT x-tw-cdn: VZ Content-Length: 33847 Connection: close
2024-04-26 04:11:31 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 73 63 72 69 62 65 3d 22 70 61 67 65 3a 62 75 74 74 6f 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 77 69 74 74 65 72 20 54 77 65 65 74 20 42 75 74 74 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 61 73 65 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e Data Ascii: <!DOCTYPE html><html data-scribe="page:button"><head> <meta charset="utf-8"> <link rel="dns-prefetch" href="//twitter.com"> <title>Twitter Tweet Button</title> <base target="_blank"> <style type="text/css">html{margin:0;padding:0;font:normal n
2024-04-26 04:11:31 UTC	16383	IN	Data Raw: 68 69 73 2e 5f 72 65 73 75 6c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 73 75 62 73 63 72 69 62 65 72 73 3d 5b 5d 2c 45 21 3d 3d 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 59 6f 75 20 6d 75 73 74 20 70 61 73 73 20 61 20 72 65 73 6f 6c 76 65 72 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 74 68 65 20 66 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 6d 69 73 65 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 28 29 2c 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6a 28 74 Data Ascii: his._result=this._state=void 0,this._subscribers=[],E!==t&&("function"!=typeof t&&function(){throw new TypeError("You must pass a resolver function as the first argument to the promise constructor")}(),this instanceof e?function(t,e){try{e(function(e){j(t
2024-04-26 04:11:31 UTC	1081	IN	Data Raw: 72 65 74 75 72 6e 20 5f 28 22 50 6f 73 74 20 74 6f 20 25 7b 6e 61 6d 65 7d 22 2c 7b 6e 61 6d 65 3a 22 3c 62 3e 40 22 2b 73 2e 73 63 72 65 65 6e 5f 6e 61 6d 65 2b 22 3c 2f 62 3e 22 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 5f 28 22 50 6f 73 74 22 29 7d 7d 28 29 2c 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 69 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 22 70 78 22 2c 4e 2e 74 72 69 67 67 65 72 52 65 73 69 7a 65 28 6f 29 2c 4d 28 72 2e 62 6f 64 79 2c 22 72 65 61 64 79 22 29 2c 66 3d 7b 74 65 78 74 3a 73 2e 74 65 78 74 2c 73 63 72 65 65 6e 5f 6e 61 6d 65 3a 73 2e 73 63 72 65 65 6e 5f 6e 61 6d 65 2c 68 61 73 68 74 61 67 73 3a 73 2e 68 61 73 68 74 61 67 73 2c 75 72 6c 3a 73 2e 75 72 6c 2c 76 69 61 3a 73 2e 76 69 61 2c 72 Data Ascii: return _("Post to %{name}",{name:"<b>@"+s.screen_name+"</b>"});default:return _("Post")}}(),i.parentNode.style.width=i.offsetWidth+"px",N.triggerResize(o),M(r.body,"ready"),f={text:s.text,screen_name:s.screen_name,hashtags:s.hashtags,url:s.url,via:s.via,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49874	104.244.42.200	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	1179	OUT	GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690136%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	445	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:30 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: image/gif cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:31 GMT content-length: 43 x-transaction-id: bdbce5d171c06d7d strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: a29cba3d58607b1bf6c04a8490c0273f231828539839ab7860409447154c7358 connection: close
2024-04-26 04:11:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49873	104.244.42.200	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	1179	OUT	GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690137%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:31 UTC	445	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:30 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: image/gif cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:31 GMT content-length: 43 x-transaction-id: eeb52c8ac9aa1e83 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 16f44855a9f76ee01e0df2c69bb6c289e3f65b06ff9b7acb465d6465315871a8 connection: close
2024-04-26 04:11:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49875	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:31 UTC	710	OUT	GET /pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:32 UTC	318	IN	HTTP/1.1 200 OK Vary: Accept-Encoding accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT
2024-04-26 04:11:32 UTC	2654	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:32 UTC	532	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 6f 72 69 67 69 6e 2d 61 67 65 6e 74 2d 63 6c 75 73 74 65 72 3a 20 3f 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 58 2d 46 42 2d 44 65 62 75 67 3a 20 7a 50 52 46 4f 52 34 78 75 36 74 62 62 38 70 39 6e 72 48 35 6e 76 54 71 68 34 72 35 2f 74 49 4e 57 68 36 48 46 4c 44 61 7a 55 42 Data Ascii: cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"origin-agent-cluster: ?0Strict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: zPRFOR4xu6tbb8p9nrH5nvTqh4r5/tINWh6HFLDazUB
2024-04-26 04:11:32 UTC	996	IN	Data Raw: 65 30 36 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 5f 39 64 6c 73 20 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 54 2f 72 2f 61 47 54 33 67 73 6b 7a 57 42 66 2e 69 63 6f 22 20 64 61 74 61 2d 62 61 64 67 65 64 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 44 2f 72 2f 55 4a 6a 30 74 67 6b 2d 52 72 54 2e 69 63 Data Ascii: e06e<!DOCTYPE html><html id="facebook" class="_9dls __fb-light-mode" lang="en" dir="ltr"><head><link data-default-icon="https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico" data-badged-icon="https://static.xx.fbcdn.net/rsrc.php/yD/r/UJj0tgk-RrT.ic
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 73 2d 62 6c 75 65 2d 34 30 3a 23 37 37 41 37 46 46 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 36 30 3a 23 31 38 37 37 46 32 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 37 30 3a 23 32 38 35 31 41 33 3b 2d 2d 66 64 73 2d 62 6c 75 65 2d 38 30 3a 23 31 44 33 43 37 38 3b 2d 2d 66 64 73 2d 62 75 74 74 6f 6e 2d 74 65 78 74 3a 23 34 34 34 39 35 30 3b 2d 2d 66 64 73 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 32 46 33 46 35 3b 2d 2d 66 64 73 2d 64 61 72 6b 2d 6d 6f 64 65 2d 67 72 61 79 2d 33 35 3a 23 43 43 43 43 43 43 3b 2d 2d 66 64 73 2d 64 61 72 6b 2d 6d 6f 64 65 2d 67 72 61 79 2d 35 30 3a 23 38 32 38 32 38 32 3b 2d 2d 66 64 73 2d 64 61 72 6b 2d 6d 6f 64 65 2d 67 72 61 79 2d 37 30 3a 23 34 41 34 41 34 41 3b 2d 2d 66 64 73 2d 64 61 72 6b 2d 6d 6f 64 65 2d Data Ascii: s-blue-40:#77A7FF;--fds-blue-60:#1877F2;--fds-blue-70:#2851A3;--fds-blue-80:#1D3C78;--fds-button-text:#444950;--fds-comment-background:#F2F3F5;--fds-dark-mode-gray-35:#CCCCCC;--fds-dark-mode-gray-50:#828282;--fds-dark-mode-gray-70:#4A4A4A;--fds-dark-mode-
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 74 65 61 6c 2d 74 69 6e 74 2d 39 30 3a 23 46 30 46 41 46 38 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 3a 23 46 42 37 32 34 42 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 2d 74 69 6e 74 2d 33 30 3a 23 46 33 38 45 37 42 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 6f 6d 61 74 6f 2d 74 69 6e 74 2d 39 30 3a 23 46 44 45 46 45 44 3b 2d 2d 66 64 73 2d 73 74 72 6f 6e 67 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 32 2c 2e 38 2c 2e 33 32 2c 31 29 3b 2d 2d 66 64 73 2d 75 6e 69 66 69 65 64 2d 62 6c 75 65 2d 33 35 3a 23 31 34 35 35 42 30 3b 2d 2d 66 64 73 2d 75 6e 69 66 69 65 64 2d 67 72 61 79 2d 32 30 3a 23 33 32 33 34 33 36 3b 2d 2d 66 64 73 2d 77 68 69 74 65 3a 23 46 46 46 46 46 46 3b 2d 2d 66 64 73 2d 77 68 Data Ascii: teal-tint-90:#F0FAF8;--fds-spectrum-tomato:#FB724B;--fds-spectrum-tomato-tint-30:#F38E7B;--fds-spectrum-tomato-tint-90:#FDEFED;--fds-strong:cubic-bezier(.12,.8,.32,1);--fds-unified-blue-35:#1455B0;--fds-unified-gray-20:#323436;--fds-white:#FFFFFF;--fds-wh
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 73 65 61 66 6f 61 6d 3a 23 35 34 43 37 45 43 3b 2d 2d 62 61 73 65 2d 74 65 61 6c 3a 23 32 41 42 42 41 37 3b 2d 2d 62 61 73 65 2d 74 6f 6d 61 74 6f 3a 23 46 42 37 32 34 42 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 69 6e 66 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 32 31 34 2c 20 38 39 25 2c 20 35 32 25 29 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 73 75 63 63 65 73 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 31 41 32 34 43 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 61 74 74 65 6e 74 69 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 34 30 2c 20 38 39 25 2c 20 35 32 25 29 3b 2d 2d 74 65 78 74 2d 62 61 64 67 65 2d 63 72 69 74 69 63 61 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 34 31 65 33 66 3b 2d 2d 62 6c 75 65 2d 6c 69 6e 6b 3a 23 30 30 36 Data Ascii: seafoam:#54C7EC;--base-teal:#2ABBA7;--base-tomato:#FB724B;--text-badge-info-background:hsl(214, 89%, 52%);--text-badge-success-background:#31A24C;--text-badge-attention-background:hsl(40, 89%, 52%);--text-badge-critical-background:#e41e3f;--blue-link:#006
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 32 38 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 30 32 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 37 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 62 6c 75 65 2d 6c 69 6e 6b 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 33 30 25 29 20 73 65 70 69 61 28 39 38 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 36 36 2e 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 39 32 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 31 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 31 25 29 3b 2d Data Ascii: aturate(200%) saturate(200%) saturate(128%) hue-rotate(359deg) brightness(102%) contrast(107%);--filter-blue-link-icon:invert(30%) sepia(98%) saturate(200%) saturate(200%) saturate(200%) saturate(166.5%) hue-rotate(192deg) brightness(91%) contrast(101%);-
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 35 35 2c 30 29 29 3b 2d 2d 6e 61 76 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2d 77 61 73 68 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 20 23 46 30 46 32 46 35 2c 20 72 67 62 61 28 32 34 30 2c 32 34 32 2c 32 34 35 2e 39 29 2c 20 72 67 62 61 28 32 34 30 2c 32 34 32 2c 32 34 35 2c 2e 37 29 2c 20 72 67 62 61 28 32 34 30 2c 32 34 32 2c 32 34 35 2c 2e 34 29 2c 20 72 67 62 61 28 32 34 30 2c 32 34 32 2c 32 34 35 2c 30 29 29 3b 2d 2d 6e 65 67 61 74 69 76 65 3a 68 73 6c 28 33 35 30 2c 20 38 37 25 2c 20 35 35 25 29 3b 2d 2d 6e 65 67 61 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 33 35 30 2c 20 38 37 25 2c 20 35 35 25 2c 20 32 30 25 29 3b 2d 2d 6e 65 77 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e Data Ascii: 55,0));--nav-bar-background-gradient-wash:linear-gradient(to top, #F0F2F5, rgba(240,242,245.9), rgba(240,242,245,.7), rgba(240,242,245,.4), rgba(240,242,245,0));--negative:hsl(350, 87%, 55%);--negative-background:hsl(350, 87%, 55%, 20%);--new-notification
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 6f 75 6e 64 3a 23 42 45 43 33 43 39 3b 2d 2d 72 61 74 69 6e 67 2d 73 74 61 72 2d 61 63 74 69 76 65 3a 23 45 42 36 36 30 44 3b 2d 2d 73 63 72 6f 6c 6c 2d 74 68 75 6d 62 3a 23 42 43 43 30 43 34 3b 2d 2d 73 63 72 6f 6c 6c 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 2c 20 30 20 2d 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 69 6e 73 65 74 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 34 45 36 45 42 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 66 6c 6f 61 74 69 6e 67 3a 23 66 66 66 66 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 Data Ascii: ound:#BEC3C9;--rating-star-active:#EB660D;--scroll-thumb:#BCC0C4;--scroll-shadow:0 1px 2px rgba(0, 0, 0, 0.1), 0 -1px rgba(0, 0, 0, 0.1) inset;--secondary-button-background:#E4E6EB;--secondary-button-background-floating:#ffffff;--secondary-button-backgrou
2024-04-26 04:11:32 UTC	1500	IN	Data Raw: 2d 61 63 74 69 76 65 2d 69 63 6f 6e 3a 23 30 30 36 34 44 31 3b 2d 2d 74 6f 67 67 6c 65 2d 61 63 74 69 76 65 2d 74 65 78 74 3a 23 30 30 36 34 44 31 3b 2d 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2d 61 63 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 37 46 33 46 46 3b 2d 2d 74 6f 6f 6c 74 69 70 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 34 34 2c 20 32 34 34 2c 20 32 34 34 2c 20 30 2e 38 29 3b 2d 2d 74 6f 6f 6c 74 69 70 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 30 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 35 29 3b 2d 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 77 61 73 68 3a 23 45 34 45 36 45 42 3b 2d 2d 77 65 62 2d 77 61 73 68 3a 23 46 30 46 32 46 35 Data Ascii: -active-icon:#0064D1;--toggle-active-text:#0064D1;--toggle-button-active-background:#E7F3FF;--tooltip-background:rgba(244, 244, 244, 0.8);--tooltip-box-shadow:0 2px 4px 0 var(--shadow-5);--popover-border-color:transparent;--wash:#E4E6EB;--web-wash:#F0F2F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49878	104.244.42.136	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:32 UTC	931	OUT	GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690136%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:32 UTC	446	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:31 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: image/gif cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:32 GMT content-length: 43 x-transaction-id: 7ec8437452856d74 strict-transport-security: max-age=631138519 x-response-time: 67 x-connection-hash: 2f512b55861b2603c31ed5e21db49aba6f47fc380ecce945c6bf0a165e0fd3ae connection: close
2024-04-26 04:11:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49877	104.244.42.136	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:32 UTC	931	OUT	GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.painrehabilitation.com.au%2Fblog%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1714104690137%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%222615f7e52b7e0%3A1702314776716%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=c132cda7c95d2be522ecf39493ead7e166a38495 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:32 UTC	445	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:11:32 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: image/gif cache-control: must-revalidate, max-age=600 last-modified: Fri, 26 Apr 2024 04:11:32 GMT content-length: 43 x-transaction-id: 132f7868c572c7fb strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 67bd216cb424533569ba6375b3a19f7a2392f1b6443f5701c71b93e99f010e7c connection: close
2024-04-26 04:11:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49880	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:32 UTC	375	OUT	GET /rsrc.php/v3/yD/r/FEppCFCt76d.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:32 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OIlAxCmR79nrM/Ez4ygGlg== Expires: Sat, 12 Apr 2025 04:29:10 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: aECIVrWnWLvN3z9Hq3NiOqOXP4CdhSFcpn0TSFK2kUqQVHHE8xzd7ZkGMY2/xC9kUJExY3z6R6nsMCpECZQweQ== Date: Fri, 26 Apr 2024 04:11:32 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 299
2024-04-26 04:11:32 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:32 UTC	298	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 60 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 7c 25 1c ba 00 00 00 1f 74 52 4e 53 00 f0 fc 01 fe 21 c5 5c 34 f5 e1 fa e6 76 ab 1b 32 a8 f8 e8 29 14 d9 ee a0 fb 7e de fd eb 1e 43 49 7d 1d 00 00 00 5b 49 44 41 54 78 da 95 cd 47 0a c0 30 0c 44 51 b9 a5 f7 de e7 fe b7 0c 8e b1 b1 03 59 64 76 ff 21 10 7d 2f 6a c3 16 39 c6 00 62 40 f9 9d a4 c8 84 d7 75 01 94 e4 ad c2 b3 b9 d1 c1 c0 a8 33 d0 0f 1a 00 90 34 Data Ascii: PNGIHDR(-S`PLTE\|%tRNS!\4v2)~CI}[IDATxG0DQYdv!}/j9b@u34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49876	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:32 UTC	991	OUT	POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2890 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 134 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:32 UTC	134	OUT	Data Raw: 65 76 65 6e 74 5f 69 64 3d 37 33 36 32 30 32 33 35 39 35 39 39 35 32 34 39 33 31 36 26 6d 61 72 6b 65 72 5f 70 61 67 65 5f 74 69 6d 65 3d 31 32 33 39 26 73 63 72 69 70 74 5f 70 61 74 68 3d 58 43 6f 6d 65 74 50 61 67 65 55 6e 6f 77 6e 65 64 50 61 67 65 43 6f 6e 74 72 6f 6c 6c 65 72 26 77 65 69 67 68 74 3d 30 26 63 6c 69 65 6e 74 5f 73 74 61 72 74 3d 31 26 6c 73 64 3d 41 56 70 55 58 42 2d 62 31 6f 55 Data Ascii: event_id=7362023595995249316&marker_page_time=1239&script_path=XCometPageUnownedPageController&weight=0&client_start=1&lsd=AVpUXB-b1oU
2024-04-26 04:11:33 UTC	1782	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 cross-origin-resource-policy: cross-origin Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, must-revalidate reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" origin-agent-cluster: ?0 Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length, X-Stack Access-Control-Allow-Methods: OPTIONS Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; preload X-FB-Debug: zjdnGY04QcsN7ykM3aqU8CshhNp01zeyPyOSXhbJHC6Ns/+KRVR55jjvIz/NEhSuvumO98duMuLq2AAub9ZHHg== Date: Fri, 26 Apr 2024 04:11:32 GMT Transfer-Encoding: chunked X-FB-Connection-Quality: MODERATE; q=0.3, rtt=152, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=260, ullat=189 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-04-26 04:11:33 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-04-26 04:11:33 UTC	245	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 65 72 72 6f 72 22 3a 31 33 35 37 30 30 35 2c 22 65 72 72 6f 72 53 75 6d 6d 61 72 79 22 3a 22 59 6f 75 72 20 52 65 71 75 65 73 74 20 43 6f 75 6c 64 6e 27 74 20 62 65 20 50 72 6f 63 65 73 73 65 64 22 2c 22 65 72 72 6f 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 72 65 20 77 61 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 20 57 65 27 72 65 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 67 65 74 74 69 6e 67 20 69 74 20 66 69 78 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 77 65 20 63 61 6e 2e 22 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 36 32 30 32 33 35 39 34 36 37 35 35 35 31 35 33 36 22 7d 0d 0a Data Ascii: for (;;);{"__ar":1,"error":1357005,"errorSummary":"Your Request Couldn't be Processed","errorDescription":"There was a problem with this request. We're working on getting it fixed as soon as we can.","payload":null,"lid":"7362023594675551536"}
2024-04-26 04:11:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49881	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:32 UTC	403	OUT	GET /rsrc.php/v3iEpO4/yy/l/en_US/JEeFeYKiBmD.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1759	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PdqNpN/pJzukga5iK8Togg== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: DMEQncGWCke5YPTJxeurHpRqxwKH6i5VCEjfuA4UWg3h5iEmTuH60tqdUC55T/f5/C0p0veMCt1wVPJOnU7gcA== Date: Fri, 26 Apr 2024 04:11:33 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=47, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 547361
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 Data Ascii: ;/FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__liste
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 74 28 61 29 7d 63 61 74 63 68 28 61 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 7d 29 7d 66 26 26 66 2e 6f 6e 63 65 26 26 63 5b 22 64 65 6c 65 74 65 22 5d 28 67 29 7d 72 65 74 75 72 6e 21 30 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 63 3d 7b 7d 3b 61 2e 41 62 6f 72 74 53 69 67 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 69 66 28 61 21 3d 3d 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6c 6c 65 67 61 6c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 22 29 3b 62 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 5f 61 62 6f 72 74 65 64 3d 21 31 7d 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 2e 70 72 6f 74 6f 74 Data Ascii: t(a)}catch(a){setTimeout(function(){throw a})}f&&f.once&&c["delete"](g)}return!0};return a}(),c={};a.AbortSignal=function(){function a(a){if(a!==c)throw new TypeError("Illegal constructor.");b.call(this);this._aborted=!1}a.prototype=Object.create(b.protot
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 62 61 63 6b 20 66 75 6e 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 61 62 6c 65 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2c 61 5b 64 5d 2c 64 2c 61 29 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 65 29 3a 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 61 74 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 74 68 69 73 3b 72 65 74 75 Data Ascii: (typeof b!=="function")throw new TypeError("Callback function must be callable.");for(var d=0;d<a.length;d++){var e=b.call(a,a[d],d,a);Array.isArray(e)?c.push.apply(c,e):c.push(e)}return c};Array.prototype.flatMap=function(a){var c=arguments[1]\|\|this;retu
2024-04-26 04:11:33 UTC	1314	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 29 7d 29 28 29 3b 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 3d 6e 75 6c 6c 26 26 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 4c 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 61 2e 63 61 6c 6c 28 62 2c 65 2c 64 2c 63 29 Data Ascii: ray.prototype[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]=Array.prototype.values)})();"use strict";Array.prototype.findLast==null&&(Array.prototype.findLast=function(a,b){var c=this;for(var d=c.length-1;d>=0;d--){var e=c[d],f=a.call(b,e,d,c)
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 29 3b 74 79 70 65 6f 66 20 62 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 28 63 2e 73 69 67 6e 61 74 75 72 65 3d 62 29 3b 72 65 74 75 72 6e 20 63 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 28 61 26 26 2f 5e 5b 41 2d 5a 5d 2f 2e 74 65 73 74 28 61 29 3f 61 3a 76 6f 69 64 20 30 2c 62 26 26 28 62 2e 70 61 72 61 6d 73 26 26 62 2e 70 61 72 61 6d 73 2e 6c 65 6e 67 74 68 7c 7c 62 2e 72 65 74 75 72 6e 73 29 3f 22 66 75 6e 63 74 69 6f 6e 28 22 2b 28 62 2e 70 61 72 61 6d 73 3f 62 2e 70 61 72 61 6d 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 61 2e 72 65 70 6c 61 63 65 28 22 3f 22 2c 22 22 29 3a 61 7d 29 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 2b 22 Data Ascii: );typeof b!=="undefined"&&(c.signature=b);return c},d=function(a,b){return c(a&&/^[A-Z]/.test(a)?a:void 0,b&&(b.params&&b.params.length\|\|b.returns)?"function("+(b.params?b.params.map(function(a){return/\?/.test(a)?"?"+a.replace("?",""):a}).join(","):"")+"
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 65 64 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 73 65 6c 66 2e 5f 5f 44 45 56 5f 5f 3d 73 65 6c 66 2e 5f 5f 44 45 56 5f 5f 7c 7c 30 2c 73 65 6c 66 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 0a 0a 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 6b 65 79 73 22 2c 64 3d 22 76 61 6c 75 65 73 22 2c 65 3d 22 65 6e 74 72 69 65 73 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 28 41 72 72 61 79 29 2c 62 3b 61 7c 7c 28 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 74 68 69 73 2e 24 31 3d 61 2c 74 68 69 73 2e 24 32 3d Data Ascii: ed"?this:typeof self!=="undefined"?self:{});self.__DEV__=self.__DEV__\|\|0,self.emptyFunction=function(){};(function(a,b){var c="keys",d="values",e="entries",f=function(){var a=h(Array),b;a\|\|(b=function(){"use strict";function a(a,b){this.$1=a,this.$2=
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 74 20 69 6d 70 6c 65 6d 65 6e 74 20 6b 65 79 73 2e 22 29 7d 2c 76 61 6c 75 65 73 3a 61 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 61 29 7d 2c 65 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 74 72 69 6e 67 73 20 64 65 66 61 75 6c 74 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 6e 27 74 20 69 6d 70 6c 65 6d 65 6e 74 20 65 6e 74 72 69 65 73 2e 22 29 7d 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e Data Ascii: t implement keys.")},values:a?function(a){return a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]()}:function(a){return new b(a)},entries:function(){throw TypeError("Strings default iterator doesn't implement entries.")}}}();function h(a){return
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2e 46 42 5f 65 6e 75 6d 65 72 61 74 65 3d 6b 7d 29 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 74 68 69 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 0a 0a 0a 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 45 6c 65 6d 65 6e 74 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 62 Data Ascii: .FB_enumerate=k})(typeof global==="object"?global:typeof this==="object"?this:typeof window==="object"?window:typeof self==="object"?self:{});"use strict";(function(){if(typeof Element==="undefined"\|\|Element.prototype.scroll)return;function a(a,b){b
2024-04-26 04:11:33 UTC	910	IN	Data Raw: 61 72 20 62 3d 2f 5c 75 32 30 32 38 2f 67 2c 63 3d 2f 5c 75 32 30 32 39 2f 67 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 64 3d 61 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 2c 66 29 3b 64 26 26 28 2d 31 3c 64 2e 69 6e 64 65 78 4f 66 28 22 5c 75 32 30 32 38 22 29 26 26 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 62 2c 22 5c 5c 75 32 30 32 38 22 29 29 2c 2d 31 3c 64 2e 69 6e 64 65 78 4f 66 28 22 5c 75 32 30 32 39 22 29 26 26 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 63 2c 22 5c 5c 75 32 30 32 39 22 29 29 29 3b 72 65 74 75 72 6e 20 64 7d 7d 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 29 7d 29 28 29 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 Data Ascii: ar b=/\u2028/g,c=/\u2029/g;return function(d,e,f){d=a.call(this,d,e,f);d&&(-1<d.indexOf("\u2028")&&(d=d.replace(b,"\\u2028")),-1<d.indexOf("\u2029")&&(d=d.replace(c,"\\u2029")));return d}}(JSON.stringify))})();(function(){var a=Object.prototype.hasOwnPr
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2e 5f 5f 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 53 4d 6d 65 74 61 3d 62 3b 72 65 74 75 72 6e 20 61 7d 7d 29 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 74 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 74 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 7b 7d 29 3b 0a 0a 0a 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 7c 7c 28 53 Data Ascii: .__m=function(a,b){a.__SMmeta=b;return a}})(typeof globalThis!=="undefined"?globalThis:typeof global!=="undefined"?global:typeof window!=="undefined"?window:typeof this!=="undefined"?this:typeof self!=="undefined"?self:{});String.prototype.contains\|\|(S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49882	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	622	OUT	GET /rsrc.php/v3/yx/l/0,cross/S0jWmsE7Isg.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1757	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: O55tNraCiTI+hpXcPlZllQ== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 4VCijfzywAHjQBSb8NZW+e7fzF/2KxSxXSs0L+tVkcm/HBMaM4UY/EwANPuNEV6gQnB/ocHgEfg8m5QcEBH1xg== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=71, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 610897
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 6c 61 62 65 6c 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 Data Ascii: form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textar
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 7d 64 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 64 74 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 62 62 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 61 64 64 65 31 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 63 6f 6c 6f 72 3a 23 64 61 64 64 65 31 3b 68 65 69 67 68 74 3a 31 70 78 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 27 2e 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a Data Ascii: }dd{color:#000}dt{color:#606770}ul{list-style-type:none;margin:0;padding:0}abbr{border-bottom:none;text-decoration:none}hr{background:#dadde1;border-width:0;color:#dadde1;height:1px}.clearfix:after{clear:both;content:'.';display:block;font-size:0;height:
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 74 68 3a 32 30 30 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 55 49 46 75 6c 6c 50 61 67 65 5f 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 30 3b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 65 6d 70 74 79 5f 6d 65 73 73 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 36 66 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 32 30 70 78 20 35 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 65 65 5f 61 6c 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 73 74 61 6e 64 61 72 64 5f 73 74 61 74 75 73 5f 65 6c 65 6d 65 6e 74 Data Ascii: th:200px;word-wrap:break-word}.UIFullPage_Container{margin:0 auto;padding:20px 12px 0;width:940px}.empty_message{background:#f5f6f7;font-size:13px;line-height:17px;padding:20px 20px 50px;text-align:center}.see_all{text-align:right}.standard_status_element
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 36 70 78 3b 77 69 64 74 68 3a 32 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 6f 62 62 7b 68 65 69 67 68 74 3a 33 34 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 32 35 63 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 32 35 63 6d 20 61 5b 72 6f 6c 65 3d 27 62 75 74 74 6f 6e 27 5d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 29 7d 2e 5f 37 31 70 6e 20 61 5b 64 61 74 61 2d 68 6f 76 65 72 63 61 72 64 5d 3a 6e 6f 74 28 2e 5f 35 70 63 71 29 2c 2e 5f 37 31 70 6e 20 2e 5f 33 6c 33 76 2c 2e 5f 37 31 70 6e 20 2e 5f 33 6c 33 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d Data Ascii: x;padding:8px 6px;width:28px}._71pn ._1obb{height:34px}._71pn ._25cm{color:var(--secondary-text)}._71pn ._25cm a[role='button']{color:var(--accent)}._71pn a[data-hovercard]:not(._5pcq),._71pn ._3l3v,._71pn ._3l3w{color:var(--primary-text);font-weight:600}
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 31 70 6e 20 2e 5f 36 71 76 74 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6e 65 67 61 74 69 76 65 29 7d 2e 5f 37 31 70 6e 20 2e 5f 33 69 71 65 7b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 35 6a 65 69 7b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 20 30 20 36 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 38 76 6a 2e 5f 31 38 76 6a 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 5f 37 31 70 6e 20 2e 5f 36 64 63 31 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 63 6f 69 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 Data Ascii: 1pn ._6qvt::after{border:1px solid var(--negative)}._71pn ._3iqe{padding:4px}._71pn ._5jei{padding:0 2px 0 6px}._71pn ._18vj._18vj{color:var(--secondary-text);height:32px;line-height:1}._71pn ._6dc1{color:var(--disabled-text)}._71pn ._6coi{color:var(--sec
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 73 72 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6d 61 72 67 69 6e 3a 38 70 78 20 31 36 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 5f 37 31 70 6e 20 2e 5f 37 63 5f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: y-text)}._71pn ._6srr{border-bottom:1px solid var(--divider);border-top:1px solid var(--divider);color:var(--secondary-text);font-size:15px;font-weight:600;margin:8px 16px;padding:8px 0}._71pn ._7c_r{color:var(--secondary-text);font-size:15px;font-weight:
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2d 62 75 74 74 6f 6e 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 69 20 2e 5f 35 72 35 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 69 20 2e 5f 35 72 35 67 20 2e 5f 35 32 63 39 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 63 20 2e 5f 35 72 71 5f 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 61 61 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 61 63 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 Data Ascii: -button-text)}._71pn ._5r5i ._5r5g{background:var(--web-wash)}._71pn ._5r5i ._5r5g ._52c9{color:var(--primary-text)}._71pn ._5r5c ._5rq_{color:var(--primary-text)}._71pn ._5raa{color:var(--primary-text)}._71pn ._5rac{color:var(--secondary-text)}._71pn ._5
2024-04-26 04:11:33 UTC	789	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 27 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 41 72 69 61 6c 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 35 33 30 2d 35 66 34 2c 20 55 2b 31 30 61 30 2d 31 30 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 27 41 72 69 61 6c 20 42 6f 6c 64 27 29 2c 20 6c 6f 63 61 6c 28 27 41 72 69 61 6c 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 35 33 30 2d 35 66 34 2c 20 55 2b 31 30 61 30 2d 31 30 66 66 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 2e Data Ascii: {font-family:'Segoe UI Historic';src:local('Arial');unicode-range:U+530-5f4, U+10a0-10ff}@font-face{font-family:'Segoe UI Historic';font-weight:700;src:local('Arial Bold'), local('Arial');unicode-range:U+530-5f4, U+10a0-10ff}#facebook .system-fonts--body.
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 62 75 74 74 6f 6e 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 69 6e 70 75 74 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 6c 61 62 65 6c 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 73 65 6c 65 63 74 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 74 64 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 74 65 78 74 61 72 65 Data Ascii: stem-fonts--body p{font-family:inherit}#facebook .system-fonts--body button,#facebook .system-fonts--body input,#facebook .system-fonts--body label,#facebook .system-fonts--body select,#facebook .system-fonts--body td,#facebook .system-fonts--body textare
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 70 78 20 64 61 73 68 65 64 20 48 69 67 68 6c 69 67 68 74 7d 2e 78 31 75 63 7a 35 70 7b 6f 75 74 6c 69 6e 65 3a 75 6e 73 65 74 7d 2e 78 36 75 6d 74 69 67 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 7d 2e 78 37 36 69 68 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 7d 2e 78 61 71 65 61 35 79 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 78 65 38 75 76 76 78 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 78 68 66 62 68 70 77 7b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 74 79 70 65 3a 78 20 6d 61 6e 64 61 74 6f 72 79 7d 2e 78 6d 71 6c 69 77 62 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a Data Ascii: px dashed Highlight}.x1ucz5p{outline:unset}.x6umtig{border-top:0}.x76ihet{border-top:none}.xaqea5y{border-bottom:0}.xe8uvvx{list-style:none}.xhfbhpw{scroll-snap-type:x mandatory}.xmqliwb{text-decoration:line-through}@media (-webkit-min-device-pixel-ratio:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49887	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	599	OUT	GET /rsrc.php/v3/yz/r/vSgPJr1eTij.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1773	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: uR+DUcOO4pafBmBLxEJr3A== Expires: Sat, 26 Apr 2025 03:38:18 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: JpqaIzlBGIU34HURzt/vbUXlXfcq2SRQEB9FwUVMGeyG76Bv5c8aiiQwSoSuws6eQwSQKq2fonVu4NwbUwJlpA== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 277781
2024-04-26 04:11:33 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:33 UTC	16044	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-04-26 04:11:33 UTC	16384	IN	Data Raw: 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 3b 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2e 6b 65 79 2c 64 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 3b 62 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 29 Data Ascii: =d.enumerable\|\|!1;d.configurable=!0;"value"in d&&(d.writable=!0);Object.defineProperty(a,d.key,d)}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}();b.inheritsLoose=function(a,b){Object.assign(a,b);a.prototype=Object.create(b&&b.prototype)
2024-04-26 04:11:33 UTC	16384	IN	Data Raw: 65 73 73 61 67 65 50 61 72 61 6d 73 3d 66 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 29 7d 29 3b 6e 2e 74 61 61 6c 4f 70 63 6f 64 65 73 3d 5b 63 28 22 66 62 2d 65 72 72 6f 72 2d 6c 69 74 65 22 29 2e 54 41 41 4c 4f 70 63 6f 64 65 2e 50 52 45 56 49 4f 55 53 5f 46 52 41 4d 45 5d 3b 6e 2e 73 74 61 63 6b 3b 74 68 72 6f 77 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 76 61 72 20 64 3d 22 4d 69 6e 69 66 69 65 64 20 69 6e 76 61 72 69 61 6e 74 20 23 22 2b 61 2b 22 3b 20 25 73 22 3b 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2b 3d 22 20 50 61 72 61 6d 73 3a 20 22 2b 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 25 73 22 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 3b 61 3d Data Ascii: essageParams=f.map(function(a){return String(a)});n.taalOpcodes=[c("fb-error-lite").TAALOpcode.PREVIOUS_FRAME];n.stack;throw n}}function i(a,b){var d="Minified invariant #"+a+"; %s";b.length>0&&(d+=" Params: "+b.map(function(a){return"%s"}).join(", "));a=
2024-04-26 04:11:33 UTC	16384	IN	Data Raw: 45 43 54 49 4f 4e 22 3b 65 2e 6e 61 6d 65 3d 65 3d 3d 3d 63 26 26 65 2e 6e 61 6d 65 21 3d 6e 75 6c 6c 26 26 65 2e 6e 61 6d 65 21 3d 3d 22 22 3f 65 2e 6e 61 6d 65 3a 74 79 70 65 6f 66 20 28 63 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 63 2e 6e 61 6d 65 29 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 63 2e 6e 61 6d 65 21 3d 3d 22 22 3f 63 2e 6e 61 6d 65 3a 64 21 3d 6e 75 6c 6c 26 26 64 2e 6c 65 6e 67 74 68 3e 30 3f 22 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 57 69 74 68 5f 22 2b 64 2e 6a 6f 69 6e 28 22 5f 22 29 3a 22 55 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 5f 22 2b 28 63 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 74 79 70 65 6f 66 20 63 29 3b 74 72 79 7b 66 3d 63 3d 3d 3d 6e 75 6c 6c 7c 7c 63 3d Data Ascii: ECTION";e.name=e===c&&e.name!=null&&e.name!==""?e.name:typeof (c===null\|\|c===void 0?void 0:c.name)==="string"&&c.name!==""?c.name:d!=null&&d.length>0?"UnhandledRejectionWith_"+d.join("_"):"UnhandledRejection_"+(c===null?"null":typeof c);try{f=c===null\|\|c=
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 7d 3b 63 2e 68 6f 6c 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 31 5b 61 5d 3b 63 21 3d 3d 22 70 65 72 73 69 73 74 65 6e 74 22 26 26 74 68 69 73 2e 24 41 72 62 69 74 65 72 45 76 65 6e 74 48 6f 6c 64 65 72 32 28 61 29 3b 69 66 28 63 21 3d 3d 22 65 76 65 6e 74 22 29 7b 76 61 72 20 64 3b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 66 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 67 3d 31 3b 67 3c 65 3b 67 2b 2b 29 66 5b 67 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 67 5d 3b 72 65 74 75 72 Data Ascii: a){return this.$ArbiterEventHolder1[a]};c.holdEvent=function(a){var c=this.$ArbiterEventHolder1[a];c!=="persistent"&&this.$ArbiterEventHolder2(a);if(c!=="event"){var d;for(var e=arguments.length,f=new Array(e>1?e-1:0),g=1;g<e;g++)f[g-1]=arguments[g];retur
2024-04-26 04:11:33 UTC	14884	IN	Data Raw: 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 7b 62 6c 6f 63 6b 69 6e 67 3a 6e 65 77 20 4d 61 70 28 29 2c 6e 6f 6e 62 6c 6f 63 6b 69 6e 67 3a 6e 65 77 20 4d 61 70 28 29 2c 22 64 65 66 61 75 6c 74 22 3a 6e 65 77 20 4d 61 70 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 6e 2e 61 64 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 6e 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 2c 6d 2e 69 6e 66 6f 72 6d 28 68 2c 61 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 2c 62 29 7b 6f 2e 61 64 64 28 70 28 61 2c 62 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 63 29 7b 6d 2e 69 6e 66 6f 72 6d 28 70 28 61 2c 62 29 2c 63 2c 22 70 65 72 73 69 73 74 65 6e 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 Data Ascii: n b}function b(){return{blocking:new Map(),nonblocking:new Map(),"default":new Map()}}function d(a){n.add(a)}function e(a){n["delete"](a),m.inform(h,a,"persistent")}function f(a,b){o.add(p(a,b))}function q(a,b,c){m.inform(p(a,b),c,"persistent")}function r
2024-04-26 04:11:33 UTC	16384	IN	Data Raw: 6e 67 74 68 29 62 72 65 61 6b 3b 66 3d 63 5b 65 2b 2b 5d 7d 65 6c 73 65 7b 65 3d 63 2e 6e 65 78 74 28 29 3b 69 66 28 65 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 66 3d 65 2e 76 61 6c 75 65 7d 66 3d 66 3b 76 61 72 20 69 3d 66 5b 30 5d 3b 66 3d 66 5b 31 5d 3b 68 5b 69 5d 3d 66 7d 72 65 74 75 72 6e 7b 73 65 74 50 72 6f 70 73 3a 62 2c 73 74 72 69 6e 67 50 72 6f 70 73 3a 67 2c 76 65 63 74 6f 72 50 72 6f 70 73 3a 68 7d 7d 3b 61 2e 63 6f 6d 62 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3b 61 21 3d 6e 75 6c 6c 26 26 62 21 3d 6e 75 6c 6c 3f 28 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2e 73 74 72 69 6e 67 50 72 6f 70 73 2c 61 2e 73 74 72 69 6e 67 50 72 6f 70 73 Data Ascii: ngth)break;f=c[e++]}else{e=c.next();if(e.done)break;f=e.value}f=f;var i=f[0];f=f[1];h[i]=f}return{setProps:b,stringProps:g,vectorProps:h}};a.combine=function(a,b){var c;a!=null&&b!=null?(a.stringProps=babelHelpers["extends"]({},b.stringProps,a.stringProps
2024-04-26 04:11:33 UTC	16384	IN	Data Raw: 61 6c 69 7a 65 72 4e 6f 45 6e 63 6f 64 69 6e 67 22 29 29 7d 3b 65 2e 74 6f 53 74 72 69 6e 67 52 61 77 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 52 61 77 51 75 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 63 28 22 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 53 56 43 68 65 63 6b 65 72 22 29 2e 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 72 79 2c 63 28 22 50 48 50 51 75 65 72 79 53 65 72 69 61 6c 69 7a 65 72 4e 6f 45 6e 63 6f 64 69 6e 67 22 29 29 7d 3b 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 50 72 65 73 65 72 76 65 51 Data Ascii: alizerNoEncoding"))};e.toStringRawQuery=function(){return a.prototype.toStringRawQuery.call(this,c("UriNeedRawQuerySVChecker").isDomainNeedRawQuery,c("PHPQuerySerializerNoEncoding"))};e.toStringPreserveQuery=function(){return a.prototype.toStringPreserveQ
2024-04-26 04:11:33 UTC	14884	IN	Data Raw: 6f 75 72 63 65 3a 20 75 6e 6b 6e 6f 77 6e 20 63 61 6c 6c 65 72 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 65 74 42 6f 6f 74 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 3d 61 3b 66 6f 72 28 61 3d 30 3b 61 3c 6b 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 6b 5b 61 5d 3b 62 28 6c 29 7d 6b 3d 5b 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 24 31 3d 61 7d 76 61 72 20 65 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 24 31 3b 72 65 74 75 72 6e 20 61 7d 3b 65 2e 67 65 74 4d 6f 64 75 6c 65 49 64 41 73 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 31 7d 3b 65 2e 6c 6f Data Ascii: ource: unknown caller";a=function(){a.setBootloader=function(a){l=a;for(a=0;a<k.length;a++){var b=k[a];b(l)}k=[]};function a(a){this.$1=a}var e=a.prototype;e.getModuleId=function(){var a=this.$1;return a};e.getModuleIdAsRef=function(){return this.$1};e.lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49883	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	753	OUT	GET /rsrc.php/v3iOSK4/yk/l/en_US/fEweerzOoLdN1tHVL5OZK-DYvatkvPhoO1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqp55HfXW__mMgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1773	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ofsBAQyVK4wq7eIyevgkKg== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: G0jXiqsaCQeC0KuhfkLOzpPa7AJw7ru8deh9DeV6ePD3BTzYBtfvSIpSqQ19KKeYEnJliGktPotBPBvB46T9BA== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3414, tp=-1, tpl=-1, uplat=53, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 787305
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4c 6f 67 49 6e 48 69 64 64 65 6e 49 6e 70 75 74 73 5f 64 61 74 61 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 61 6c 75 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a Data Ascii: ;/FB_PKG_DELIM/__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 7d 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 43 6f 6f 6b 69 65 43 61 74 65 67 6f 72 79 43 6f 6e 74 72 6f 6c 73 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 22 37 33 33 34 36 33 37 33 31 36 35 37 31 33 38 32 22 2c 6d 65 74 61 64 61 74 61 3a 7b 7d 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 43 6f 6f 6b 69 65 43 61 74 65 67 6f 72 79 43 6f 6e 74 72 6f 6c 73 51 75 65 72 79 22 2c 6f 70 65 72 61 Data Ascii: abstractKey:null}}();e.exports=a}),null);__d("CometCookieCategoryControlsQuery$Parameters",[],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:"7334637316571382",metadata:{},name:"CometCookieCategoryControlsQuery",opera
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 3b 72 65 74 75 72 6e 7b 66 72 61 67 6d 65 6e 74 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 61 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 53 65 74 44 65 6e 73 65 4d 6f 64 65 4d 75 74 61 74 69 6f 6e 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 63 2c 74 79 70 65 3a 22 4d 75 74 61 74 69 6f 6e 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 6b 69 6e 64 3a 22 52 65 71 75 65 73 74 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 61 2c 6b 69 6e 64 3a 22 4f 70 65 72 61 74 69 6f 6e 22 2c 6e 61 6d 65 3a Data Ascii: storageKey:null}],storageKey:null}];return{fragment:{argumentDefinitions:a,kind:"Fragment",metadata:null,name:"CometSetDenseModeMutation",selections:c,type:"Mutation",abstractKey:null},kind:"Request",operation:{argumentDefinitions:a,kind:"Operation",name:
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 4c 6f 67 67 65 64 4f 75 74 41 63 63 6f 75 6e 74 53 77 69 74 63 68 65 72 55 73 65 72 57 69 74 68 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 76 69 63 65 5f 73 77 69 74 63 68 61 62 6c 65 5f 61 63 63 6f 75 6e 74 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 62 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 51 75 65 72 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 6b 69 6e 64 3a 22 52 65 71 75 65 73 74 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 61 2c 6b 69 6e 64 3a 22 4f 70 65 72 61 74 69 6f 6e 22 2c Data Ascii: ,concreteType:"LoggedOutAccountSwitcherUserWithCredentialType",kind:"LinkedField",name:"device_switchable_accounts",plural:!0,selections:[b],storageKey:null}],type:"Query",abstractKey:null},kind:"Request",operation:{argumentDefinitions:a,kind:"Operation",
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 5f 61 79 6d 68 5f 66 6c 6f 77 3a 66 61 6c 73 65 29 27 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 62 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 43 41 41 4c 6f 67 69 6e 46 6f 72 6d 44 61 74 61 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 61 61 5f 6c 6f 67 69 6e 5f 66 6f 72 6d 5f 64 61 74 61 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 72 65 73 65 74 5f 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c Data Ascii: _aymh_flow:false)'}],storageKey:null},b],storageKey:null},{alias:null,args:null,concreteType:"CAALoginFormData",kind:"LinkedField",name:"caa_login_form_data",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"reset_uri",storageKey:null},
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 54 79 70 65 3a 22 43 41 41 50 61 73 73 77 6f 72 64 45 6e 63 72 79 70 74 69 6f 6e 44 61 74 61 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 61 61 5f 70 61 73 73 77 6f 72 64 5f 65 6e 63 72 79 70 74 69 6f 6e 5f 64 61 74 61 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 61 73 73 77 6f 72 64 45 6e 63 72 79 70 74 69 6f 6e 44 61 74 61 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 65 6e 63 72 79 70 74 69 6f 6e 5f 64 61 74 61 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c Data Ascii: Type:"CAAPasswordEncryptionData",kind:"LinkedField",name:"caa_password_encryption_data",plural:!1,selections:[{alias:null,args:null,concreteType:"PasswordEncryptionData",kind:"LinkedField",name:"encryption_data",plural:!1,selections:[{alias:null,args:null
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6e 64 3a 22 52 6f 6f 74 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 43 41 41 53 61 76 65 64 41 63 63 6f 75 6e 74 73 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 4c 6f 67 67 65 64 4f 75 74 41 63 63 6f 75 6e 74 53 77 69 74 63 68 65 72 55 73 65 72 57 69 74 68 43 72 65 64 65 6e 74 69 61 6c 54 79 70 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 76 69 63 65 5f 73 77 69 74 63 68 61 62 6c 65 5f 61 63 63 6f 75 6e 74 73 22 2c 70 6c 75 72 61 6c 3a 21 Data Ascii: nd:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"useCAASavedAccountsFragment",selections:[{alias:null,args:null,concreteType:"LoggedOutAccountSwitcherUserWithCredentialType",kind:"LinkedField",name:"device_switchable_accounts",plural:!
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 63 74 69 6f 6e 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 61 63 74 69 6f 6e 3a 22 54 48 52 4f 57 22 2c 70 61 74 68 3a 22 64 65 76 69 63 65 5f 73 77 69 74 63 68 61 62 6c 65 5f 61 63 63 6f 75 6e 74 73 2e 64 65 76 69 63 65 5f 75 73 65 72 2e 66 6f 72 6d 2e 61 63 74 69 6f 6e 22 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 4c 6f 67 67 65 64 4f 75 74 41 63 63 6f 75 6e 74 53 77 69 74 63 68 65 72 41 63 63 6f 75 6e 74 46 6f 72 6d 46 69 65 6c 64 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 Data Ascii: redField",field:{alias:null,args:null,kind:"ScalarField",name:"action",storageKey:null},action:"THROW",path:"device_switchable_accounts.device_user.form.action"},{alias:null,args:null,concreteType:"LoggedOutAccountSwitcherAccountFormField",kind:"LinkedFie
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 64 28 22 43 6f 6d 65 74 53 65 74 44 61 72 6b 4d 6f 64 65 53 65 74 74 69 6e 67 4d 75 74 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 53 65 74 44 61 72 6b 4d 6f 64 65 53 65 74 74 69 6e 67 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f 63 61 6c 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 69 6e 70 75 74 22 7d 2c 63 3d 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f 63 61 6c 41 72 67 75 6d 65 6e 74 22 2c 6e Data Ascii: d("CometSetDarkModeSettingMutation.graphql",["CometSetDarkModeSettingMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"input"},c={defaultValue:null,kind:"LocalArgument",n
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 76 61 6c 75 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 3b 72 65 74 75 72 6e 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 43 41 41 4c 6f 67 69 6e 52 65 71 75 65 73 74 45 78 74 72 61 49 6e 66 6f 5f 64 61 74 61 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 62 5f 74 65 73 74 69 6e 67 5f 65 6e 61 62 6c 65 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 Data Ascii: value",storageKey:null}];return{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCAALoginRequestExtraInfo_data",selections:[{alias:null,args:null,kind:"ScalarField",name:"ab_testing_enabled",storageKey:null},{alias:null,args:null,kind:"Scalar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49886	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	610	OUT	GET /rsrc.php/v3ijuz4/yH/l/en_US/14GmiBZnqb0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1774	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 56fQGOfGRyVwRuZ0ae5t7A== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: Bs6Z7rxVpfjpVRZQbxhXHbe9itJcnvcHJlDQEuzxOaREyk/cOa1cMjiAcbw3uZFhEOVQa/1JZlySXwfPG+h1LQ== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=51, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1548318
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 74 79 6c 65 58 44 61 72 6b 54 68 65 6d 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 66 64 73 2d 62 6c 61 63 6b 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 30 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 30 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 32 30 22 3a 22 72 67 Data Ascii: ;/FB_PKG_DELIM/__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rg
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 72 61 70 65 2d 74 69 6e 74 2d 37 30 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 67 72 61 70 65 2d 74 69 6e 74 2d 39 30 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6c 65 6d 6f 6e 2d 64 61 72 6b 2d 31 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6c 65 6d 6f 6e 2d 74 69 6e 74 2d 37 30 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6c 69 6d 65 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6c 69 6d 65 2d 74 69 6e 74 2d 37 30 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6f 72 61 6e 67 65 2d 74 69 6e 74 2d 37 30 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 6f 72 61 6e 67 65 2d Data Ascii: rape-tint-70":"black","fds-spectrum-grape-tint-90":"black","fds-spectrum-lemon-dark-1":"black","fds-spectrum-lemon-tint-70":"black","fds-spectrum-lime":"black","fds-spectrum-lime-tint-70":"black","fds-spectrum-orange-tint-70":"black","fds-spectrum-orange-
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 35 22 3a 22 23 46 30 46 32 46 35 22 2c 22 61 74 74 61 63 68 6d 65 6e 74 2d 66 6f 6f 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 22 3a 22 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 29 22 2c 22 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 62 6c 75 65 22 3a 22 76 61 72 28 2d 2d 61 63 63 65 6e 74 29 22 2c 22 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 64 61 72 6b 2d 67 72 61 79 22 3a 22 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 69 63 6f 6e 29 22 2c 22 62 61 64 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 67 72 61 79 22 3a 22 76 Data Ascii: 5":"#F0F2F5","attachment-footer-background":"rgba(255,255,255,0.1)","background-deemphasized":"rgba(255,255,255,0.1)","badge-background-color-blue":"var(--accent)","badge-background-color-dark-gray":"var(--secondary-icon)","badge-background-color-gray":"v
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 30 33 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 32 25 29 22 2c 22 66 69 6c 74 65 72 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 22 3a 22 69 6e 76 65 72 74 28 31 30 30 25 29 22 2c 22 66 69 6c 74 65 72 2d 64 69 73 61 62 6c 65 64 2d 69 63 6f 6e 22 3a 22 69 6e 76 65 72 74 28 31 30 30 25 29 20 6f 70 61 63 69 74 79 28 33 30 25 29 22 2c 22 66 69 6c 74 65 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 22 3a 22 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 22 2c 22 66 Data Ascii: ) brightness(103%) contrast(102%)","filter-always-white":"invert(100%)","filter-disabled-icon":"invert(100%) opacity(30%)","filter-placeholder-icon":"invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)","f
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 22 68 69 67 68 6c 69 67 68 74 2d 62 67 22 3a 22 72 67 62 61 28 32 34 2c 20 31 31 39 2c 20 32 34 32 2c 20 2e 33 31 29 22 2c 22 68 6f 76 65 72 2d 6f 76 65 72 6c 61 79 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 29 22 2c 22 69 6e 76 65 72 73 65 2d 74 65 78 74 22 3a 22 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 29 22 2c 22 6c 69 73 74 2d 63 65 6c 6c 2d 63 68 65 76 72 6f 6e 22 3a 22 23 42 30 42 33 42 38 22 2c 22 6d 65 64 69 61 2d 68 6f 76 65 72 22 3a 22 72 67 62 61 28 36 38 2c 20 37 33 2c 20 38 30 2c 20 30 2e 31 35 29 22 2c 22 6d 65 64 69 61 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 30 35 29 22 2c 22 6d 65 64 69 61 2d 6f 75 74 65 72 2d 62 6f 72 Data Ascii: "highlight-bg":"rgba(24, 119, 242, .31)","hover-overlay":"rgba(255, 255, 255, 0.1)","inverse-text":"var(--always-white)","list-cell-chevron":"#B0B3B8","media-hover":"rgba(68, 73, 80, 0.15)","media-inner-border":"rgba(255, 255, 255, 0.05)","media-outer-bor
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 32 33 37 34 45 31 22 2c 22 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 22 3a 22 23 46 46 46 46 46 46 22 2c 22 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 22 3a 22 23 37 37 41 37 46 46 22 2c 22 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 74 65 78 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 34 35 2c 20 31 33 36 2c 20 32 35 35 2c 20 30 2e 32 29 22 2c 22 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 22 3a 22 72 67 62 61 28 32 34 2c 20 31 31 39 2c 20 32 34 32 2c 20 30 2e 32 29 22 2c 22 Data Ascii: n-background":"#2374E1","primary-button-icon":"#FFFFFF","primary-button-pressed":"#77A7FF","primary-button-text":"#FFFFFF","primary-deemphasized-button-background":"rgba(45, 136, 255, 0.2)","primary-deemphasized-button-pressed":"rgba(24, 119, 242, 0.2)","
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 72 2d 74 65 78 74 22 3a 22 23 42 43 43 30 43 34 22 2c 22 73 68 61 64 6f 77 2d 31 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 22 2c 22 73 68 61 64 6f 77 2d 32 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 22 2c 22 73 68 61 64 6f 77 2d 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 22 2c 22 73 68 61 64 6f 77 2d 38 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 22 2c 22 73 68 61 64 6f 77 2d 62 61 73 65 22 3a 22 30 20 31 70 78 20 32 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 22 2c 22 73 68 61 64 6f 77 2d 65 6c 65 76 61 74 65 64 22 3a 22 30 20 38 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 2c 20 30 20 32 70 78 20 34 70 78 20 30 20 72 67 62 Data Ascii: r-text":"#BCC0C4","shadow-1":"rgba(0, 0, 0, 0.1)","shadow-2":"rgba(0, 0, 0, 0.2)","shadow-5":"rgba(0, 0, 0, 0.5)","shadow-8":"rgba(0, 0, 0, 0.8)","shadow-base":"0 1px 2px var(--shadow-2)","shadow-elevated":"0 8px 20px 0 rgba(0, 0, 0, 0.2), 0 2px 4px 0 rgb
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 73 2d 72 69 6e 67 2d 61 66 74 65 72 22 3a 22 77 68 69 74 65 22 2c 22 63 68 61 74 2d 62 75 62 62 6c 65 2d 65 6d 70 68 61 73 69 73 2d 72 69 6e 67 2d 62 65 66 6f 72 65 22 3a 22 62 6c 61 63 6b 22 2c 22 63 68 61 74 2d 74 65 78 74 2d 62 6c 6f 63 6b 71 75 6f 74 65 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 6e 65 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 39 29 22 2c 22 63 68 61 74 2d 74 65 78 74 2d 62 6c 6f 63 6b 71 75 6f 74 65 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 2d 6d 65 64 69 61 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 29 22 2c 22 63 68 61 74 2d 69 6e 63 6f 6d 69 6e 67 2d 6d 65 73 73 61 67 65 2d 62 75 62 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: s-ring-after":"white","chat-bubble-emphasis-ring-before":"black","chat-text-blockquote-color-background-line":"rgba(255, 255, 255, 0.19)","chat-text-blockquote-color-text-primary-media":"rgba(255, 255, 255, 0.7)","chat-incoming-message-bubble-background-c
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3a 22 31 30 70 78 22 2c 22 63 61 72 64 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 32 30 70 78 22 2c 22 63 68 69 70 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 36 70 78 22 2c 22 64 69 61 6c 6f 67 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 38 70 78 22 2c 22 67 6c 69 6d 6d 65 72 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 38 70 78 22 2c 22 69 6d 61 67 65 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 34 70 78 22 2c 22 69 6e 70 75 74 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 36 70 78 22 2c 22 69 6e 70 75 74 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 22 3a 22 31 70 78 22 2c 22 6e 61 76 2d 6c 69 73 74 2d 63 65 6c 6c 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 38 70 78 22 2c 22 6c 69 73 74 2d 63 65 6c 6c 2d Data Ascii: :"10px","card-padding-vertical":"20px","chip-corner-radius":"6px","dialog-corner-radius":"8px","glimmer-corner-radius":"8px","image-corner-radius":"4px","input-corner-radius":"6px","input-border-width":"1px","nav-list-cell-corner-radius":"8px","list-cell-
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 69 6e 2d 77 69 64 74 68 22 3a 22 32 38 38 70 78 22 2c 22 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 31 30 70 78 22 2c 22 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 31 36 70 78 22 2c 22 74 6f 61 73 74 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 38 70 78 22 2c 22 74 6f 6f 6c 74 69 70 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 22 3a 22 38 70 78 22 2c 22 74 79 70 65 61 68 65 61 64 2d 6c 69 73 74 2d 6f 75 74 65 72 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 32 70 78 22 2c 22 66 64 73 2d 61 6e 69 6d 61 74 69 6f 6e 2d 65 6e 74 65 72 2d 65 78 69 74 2d 69 6e 22 3a 22 63 75 62 69 Data Ascii: -container-min-width":"288px","toast-container-padding-horizontal":"10px","toast-container-padding-vertical":"16px","toast-corner-radius":"8px","tooltip-corner-radius":"8px","typeahead-list-outer-padding-vertical":"2px","fds-animation-enter-exit-in":"cubi
2024-04-26 04:11:34 UTC	1500	IN	DELETE pathToConnection must include at least parent and connection");return}var g=e;for(e=1;e<d.length-1;e++)g&&(g=g.getLinkedRecord(d[e]));if(!c\|\|!g){b("warning")(!1,"RelayDeclarativeMutationConfig: RANGE_DELETE pathToConnection is incorrect. Unable to find connection with parentID: %s and path: %s",a,d.toString());return}a=function(){if(i){if(j>=h.length)return"break";e=h[j++]}else{j=h.next();if(j.done)return"break";e=j.value}var a=e,c=b("relay-runtime/handlers/connection/ConnectionHandler").getConnection(g,a.key,a.filters);c&&f.forEach(function(a){b("relay-runtime/handlers/connection/ConnectionHandler").deleteNode(c,a)})};for(var h=c,i=Array.isArray(h),j=0,h=i?h:h[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){d=a();if(d==="break")break}}function k(a){return a.fragment.selections&&a.fragment.selections.length>0&&a.fragment.selections[0].kind==="LinkedField"?a.fragment.selections[0].name:null}e.exports={MutationTypes:c,RangeOperations:d,convert:a}}),null); __d("relay-runtime/util/getRequestIdentifier",["invariant","relay-runtime/util/stableCopy"],(function(a,b,c,d,e,f,g){"use strict";var h;function a(a,c){var d=a.cacheID!=null?a.cacheID:a.id;d!=null\|\|g(0,22755,a.name);return d+JSON.stringify((h\|\|(h=b("relay-runtime/util/stableCopy")))(c))}e.exports=a}),null); __d("relay-runtime/store/RelayModernOperationDescriptor",["relay-runtime/store/RelayConcreteVariables","relay-runtime/store/RelayModernSelector","relay-runtime/store/RelayStoreUtils","relay-runtime/util

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49885	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	599	OUT	GET /rsrc.php/v3/yV/r/TQ5rYX3IGJd.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1772	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: EiX9NTp4RyQz352Byw837g== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: fDXwbs5sGk/+bOofT/damiNLX54LgvsmznC2n7UJKt5uGiesO6fSIZrDPOREDJra7tHSkMahYdxScOr0dlCoDA== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=39, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 26972
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 51 75 65 72 79 52 65 6e 64 65 72 65 72 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 50 72 65 6c 6f 61 64 61 62 6c 65 43 6f 6e 63 72 65 74 65 52 65 71 75 65 73 74 22 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 22 37 33 34 33 30 36 37 37 32 35 38 31 33 38 35 33 22 2c 6d 65 74 61 64 61 74 61 3a 7b 7d 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 51 75 65 72 79 52 65 6e 64 65 72 65 72 51 75 65 72 79 22 2c 6f 70 65 72 61 74 69 6f 6e 4b 69 6e 64 3a 22 71 75 65 72 79 22 2c 74 65 78 74 3a 6e Data Ascii: ;/FB_PKG_DELIM/__d("CometHovercardQueryRendererQuery$Parameters",[],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:"7343067725813853",metadata:{},name:"CometHovercardQueryRendererQuery",operationKind:"query",text:n
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3d 68 2e 75 73 65 43 6f 6e 74 65 78 74 2c 6b 3d 69 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 6b 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 6a 28 6b 29 7d 67 2e 42 61 73 65 53 75 70 70 72 65 73 73 48 6f 76 65 72 63 61 72 64 73 43 6f 6e 74 65 78 74 3d 6b 3b 67 2e 42 61 73 65 53 75 70 70 72 65 73 73 48 6f 76 65 72 63 61 72 64 73 50 72 6f 76 69 64 65 72 3d 61 3b 67 2e 75 73 65 49 73 48 6f 76 65 Data Ascii: =h.useContext,k=i.createContext(!1);function a(a){a=a.children;return i.jsx(k.Provider,{value:!0,children:a})}a.displayName=a.name+" [from "+f.id+"]";function b(){return j(k)}g.BaseSuppressHovercardsContext=k;g.BaseSuppressHovercardsProvider=a;g.useIsHove
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 5d 29 3b 64 3d 69 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 62 2e 63 75 72 72 65 6e 74 3b 62 2e 63 75 72 72 65 6e 74 3d 61 3b 61 21 3d 6e 75 6c 6c 3f 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 21 3d 6e 75 6c 6c 26 26 28 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 70 29 2c 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 70 29 29 2c 72 2e 63 75 72 72 65 6e 74 3d 3d 3d 21 30 26 26 71 28 21 30 29 29 3a 63 21 3d 6e 75 6c 6c 26 26 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 21 3d 6e 75 6c 6c 26 26 28 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e Data Ascii: ]);d=i(function(a){var c=b.current;b.current=a;a!=null?(a.addEventListener!=null&&(a.addEventListener("transitionend",p),a.addEventListener("webkitTransitionEnd",p)),r.current===!0&&q(!0)):c!=null&&c.removeEventListener!=null&&(c.removeEventListener("tran
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 73 68 6f 77 44 65 6c 61 79 22 5d 29 3b 61 3d 63 28 22 75 73 65 44 65 6c 61 79 65 64 53 74 61 74 65 22 29 28 21 31 29 3b 76 61 72 20 74 3d 61 5b 30 5d 2c 75 3d 61 5b 31 5d 3b 61 3d 6e 28 21 31 29 3b 76 61 72 20 76 3d 61 5b 30 5d 2c 77 3d 61 5b 31 5d 3b 61 3d 6e 28 21 31 29 3b 76 61 72 20 78 3d 61 5b 30 5d 2c 79 3d 61 5b 31 5d 3b 61 3d 6e 28 21 31 29 3b 76 61 72 20 7a 3d 61 5b 30 5d 2c 41 3d 61 5b 31 5d 3b 61 3d 6e 28 21 31 29 3b 76 61 72 20 42 3d 61 5b 30 5d 2c 43 3d 61 5b 31 5d 2c 44 3d 7a 26 26 42 26 26 21 78 2c 45 3d 6d 28 6e 75 6c 6c 29 2c 46 3d 6d 28 6e 75 6c 6c 29 2c 47 3d 6d 28 6e 75 6c 6c 29 2c 48 3d 63 28 22 75 73 65 43 6f 6d 65 74 44 69 73 70 6c 61 79 54 69 6d 69 6e 67 54 72 61 63 6b 65 72 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 29 28 22 48 Data Ascii: showDelay"]);a=c("useDelayedState")(!1);var t=a[0],u=a[1];a=n(!1);var v=a[0],w=a[1];a=n(!1);var x=a[0],y=a[1];a=n(!1);var z=a[0],A=a[1];a=n(!1);var B=a[0],C=a[1],D=z&&B&&!x,E=m(null),F=m(null),G=m(null),H=c("useCometDisplayTimingTrackerForInteraction")("H
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2c 73 2c 7b 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 63 28 22 48 69 64 64 65 6e 53 75 62 74 72 65 65 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 69 73 48 69 64 64 65 6e 3a 21 4b 26 26 50 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 71 2e 68 6f 76 65 72 63 61 72 64 2c 4e 26 26 71 2e 68 6f 76 65 72 63 61 72 64 56 69 73 69 62 6c 65 29 2c 72 65 66 3a 4f 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 63 28 22 46 6f 63 75 73 49 6e 65 72 74 52 65 67 69 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 66 6f 63 75 73 51 75 65 72 79 3a 64 28 22 66 6f 63 75 73 53 63 6f 70 65 51 75 65 72 69 65 73 22 29 2e 74 61 62 62 61 62 6c 65 Data Ascii: ,s,{children:j.jsx(c("HiddenSubtreeContextProvider.react"),{isHidden:!K&&P,children:j.jsx("div",{className:(h\|\|(h=c("stylex")))(q.hovercard,N&&q.hovercardVisible),ref:O,children:j.jsx(c("FocusInertRegion.react"),{focusQuery:d("focusScopeQueries").tabbable
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 70 72 65 76 65 6e 74 4e 65 73 74 65 64 22 5d 29 2c 66 3d 6b 28 63 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 53 65 74 74 69 6e 67 73 43 6f 6e 74 65 78 74 22 29 29 3b 66 3d 66 2e 68 6f 76 65 72 63 61 72 64 49 6e 74 65 72 61 63 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 3b 76 61 72 20 67 3d 6b 28 63 28 22 42 61 73 65 4e 65 73 74 65 64 48 6f 76 65 72 63 61 72 64 43 6f 6e 74 65 78 74 2e 72 65 61 63 74 22 29 29 3b 67 3d 64 28 22 42 61 73 65 53 75 70 70 72 65 73 73 48 6f 76 65 72 63 61 72 64 73 22 29 2e 75 73 65 49 73 48 6f 76 65 72 63 61 72 64 53 75 70 70 72 65 73 73 65 64 28 29 7c 7c 67 7c 7c 66 3d 3d 3d 31 3b 66 3d 6c 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 67 Data Ascii: jectWithoutPropertiesLoose(a,["preventNested"]),f=k(c("CometHovercardSettingsContext"));f=f.hovercardInteractionPreference;var g=k(c("BaseNestedHovercardContext.react"));g=d("BaseSuppressHovercards").useIsHovercardSuppressed()\|\|g\|\|f===1;f=l(null);return g
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6c 65 22 5d 29 3b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 22 64 69 76 22 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 68 7c 7c 28 68 3d 63 28 22 73 74 79 6c 65 78 22 29 29 29 28 6b 2e 63 6f 6e 74 61 69 6e 65 72 2c 69 2c 67 26 26 6b 2e 63 6f 6e 74 61 69 6e 65 72 56 69 73 69 62 6c 65 29 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 76 6f 69 64 20 30 2c 69 64 3a 65 2c 72 65 66 3a 62 2c 72 6f 6c 65 3a 66 2c 63 68 69 6c 64 72 65 6e 3a 64 7d 29 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 54 6f 6f 6c 74 Data Ascii: le"]);return j.jsx("div",babelHelpers["extends"]({},a,{className:(h\|\|(h=c("stylex")))(k.container,i,g&&k.containerVisible),"data-testid":void 0,id:e,ref:b,role:f,children:d}))}a.displayName=a.name+" [from "+f.id+"]";e=b;g["default"]=e}),98);__d("useToolt
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 61 79 43 6f 6e 74 65 6e 74 4d 73 3b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 65 3b 61 2e 68 65 61 64 6c 69 6e 65 3b 76 61 72 20 66 3d 61 2e 69 64 2c 67 3d 61 2e 69 73 56 69 73 69 62 6c 65 2c 68 3d 61 2e 74 68 65 6d 65 57 72 61 70 70 65 72 3b 68 3d 68 3d 3d 3d 76 6f 69 64 20 30 3f 69 2e 46 72 61 67 6d 65 6e 74 3a 68 3b 76 61 72 20 6a 3d 61 2e 74 6f 6f 6c 74 69 70 3b 61 2e 74 6f 6f 6c 74 69 70 54 68 65 6d 65 3b 76 61 72 20 6e 3d 61 2e 78 73 74 79 6c 65 3b 61 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 6c 6f 61 64 69 6e 67 53 74 61 74 65 22 2c 22 63 6f 6e 74 65 6e 74 4b 65 79 22 2c 22 64 65 6c 61 79 43 6f 6e 74 65 6e 74 4d 73 22 2c 22 68 65 61 64 6c 69 6e 65 Data Ascii: ayContentMs;e=e===void 0?0:e;a.headline;var f=a.id,g=a.isVisible,h=a.themeWrapper;h=h===void 0?i.Fragment:h;var j=a.tooltip;a.tooltipTheme;var n=a.xstyle;a=babelHelpers.objectWithoutPropertiesLoose(a,["loadingState","contentKey","delayContentMs","headline
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6d 70 6c 2e 72 65 61 63 74 22 29 2e 5f 5f 73 65 74 52 65 66 28 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 49 6d 70 6c 2e 72 65 61 63 74 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 50 6c 61 63 65 68 6f 6c 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 66 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 28 6a 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 61 29 29 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 5f 44 45 50 52 45 43 41 Data Ascii: mpl.react").__setRef("CometTooltipImpl.react"));function a(a){return i.jsx(c("CometPlaceholder.react"),{fallback:null,children:i.jsx(j,babelHelpers["extends"]({},a))})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),98);__d("CometTooltip_DEPRECA
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 47 72 6f 75 70 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 67 72 6f 75 70 49 44 3a 76 6f 69 64 20 30 7d 29 3b 63 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 51 75 65 72 79 52 65 6e 64 65 72 65 72 2e 65 6e 74 72 79 70 6f 69 6e 74 22 2c 5b 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 51 75 65 72 79 52 65 6e 64 65 72 65 72 51 75 65 72 79 24 50 Data Ascii: a}),98);__d("CometHovercardGroupContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({groupID:void 0});c=b;g["default"]=c}),98);__d("CometHovercardQueryRenderer.entrypoint",["CometHovercardQueryRendererQuery$P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49884	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:33 UTC	621	OUT	GET /rsrc.php/v3izEF4/yB/l/en_US/hVvQIzanlygfWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:33 UTC	1772	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: rz8bbfT/IL5fh+hEv0I3Pw== Expires: Sat, 26 Apr 2025 04:11:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: V2jG35MytM3mCXOXHmYCE7VN3XB9pGL6+L8eXXGf+9YjNLDfG9daEt/xR3ON2xJunZkj2erDcd9SKmPLhQCw3Q== Date: Fri, 26 Apr 2024 04:11:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=38, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 34040
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 62 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 6f 72 6b 46 6f 72 65 69 67 6e 45 6e 74 69 74 79 49 6e 66 6f 22 2c 6b Data Ascii: ;/FB_PKG_DELIM/__d("CometTextWithEntitiesRelay_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},b={alias:null,args:null,concreteType:"WorkForeignEntityInfo",k
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 61 73 68 74 61 67 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 72 6f 75 70 48 61 73 68 74 61 67 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 65 6e 74 69 74 79 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 61 67 65 73 43 6f 6d 65 74 50 61 67 65 4c 69 6e 6b 5f 70 61 67 65 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 70 61 67 65 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 2c 7b 61 6c 69 61 73 3a 6e Data Ascii: ashtag",kind:"ModuleImport"}],type:"GroupHashtag",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometTextWithEntitiesRelay_entity",fragmentName:"PagesCometPageLink_page",fragmentPropName:"page",kind:"ModuleImport"},{alias:n
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 22 77 65 62 5f 6c 69 6e 6b 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 66 62 63 6c 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a Data Ascii: "web_link",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"url",storageKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"fbclid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 54 69 74 6c 65 53 65 6e 74 65 6e 63 65 47 72 6f 75 70 4a 6f 69 6e 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 65 70 5f 6c 69 6e 6b 5f 6e 75 6d 62 65 72 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 50 61 67 65 57 68 61 74 73 41 70 70 4e 75 6d 62 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 Data Ascii: Key:null},{args:null,kind:"FragmentSpread",name:"CometTitleSentenceGroupJoinButtonRenderer_entity"},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"deep_link_number",storageKey:null}],type:"PageWhatsAppNumber",abstractKey
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6c 3d 5b 63 2c 6b 5d 2c 6d 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 6f 72 6b 46 6f 72 65 69 67 6e 45 6e 74 69 74 79 49 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 6f 72 6b 5f 66 6f 72 65 69 67 6e 5f 65 6e 74 69 74 79 5f 69 6e 66 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e Data Ascii: kind:"ScalarField",name:"name",storageKey:null},l=[c,k],m={alias:null,args:null,concreteType:"WorkForeignEntityInfo",kind:"LinkedField",name:"work_foreign_entity_info",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"type",storageKey:n
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 67 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6d 61 67 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 68 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 69 2c 6a 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 Data Ascii: [{alias:null,args:[g],concreteType:"Image",kind:"LinkedField",name:"image",plural:!1,selections:[h,{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},i,j],storageKey:null}],storageKey:null}],storageKey:null},{alias:null,args:null,concr
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 2c 6e 61 6d 65 3a 22 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 27 75 72 6c 28 73 69 74 65 3a 22 6d 6f 62 69 6c 65 22 29 27 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 66 2c 74 79 70 65 3a 22 41 63 74 6f 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 22 5f 5f 69 73 41 63 74 6f 72 22 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 72 6f 75 70 73 43 6f 6d 65 74 48 61 73 68 74 61 Data Ascii: ,name:"url",storageKey:'url(site:"mobile")'},{kind:"InlineFragment",selections:f,type:"Actor",abstractKey:"__isActor"},{kind:"InlineFragment",selections:[{args:null,documentName:"CometTextWithEntitiesRelay_textWithEntities",fragmentName:"GroupsCometHashta
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 64 22 2c 6e 61 6d 65 3a 22 65 78 74 65 72 6e 61 6c 5f 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 45 78 74 65 72 6e 61 6c 55 72 6c 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 6d 65 5f 69 6e 64 65 78 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 56 69 64 65 6f 54 69 6d 65 49 6e 64 65 78 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 Data Ascii: d",name:"external_url",storageKey:null}],type:"ExternalUrl",abstractKey:null},{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"time_index",storageKey:null}],type:"VideoTimeIndex",abstractKey:null},{kind:"InlineFragment",se
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6d 61 67 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 69 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 58 46 42 57 6f 72 6b 43 75 73 74 6f 6d 45 6d 6f 6a 69 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 56 69 64 65 6f 50 6c 61 79 65 72 52 65 6c 61 79 5f 76 69 64 65 6f 22 7d 2c 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 Data Ascii: "Image",kind:"LinkedField",name:"image",plural:!1,selections:[i],storageKey:null}],type:"XFBWorkCustomEmoji",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,kind:"FragmentSpread",name:"VideoPlayerRelay_video"},{args:null,kind:"FragmentSpre
2024-04-26 04:11:33 UTC	1500	IN	Data Raw: 72 6e 61 6c 4c 69 6e 6b 65 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 7b 6d 61 73 6b 3a 21 31 7d 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 65 64 45 6e 74 69 74 79 52 65 6e 64 65 72 65 72 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 69 74 65 22 2c 76 61 6c 75 65 3a 22 77 Data Ascii: rnalLinkedEntityRenderer_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"CometExternalLinkedEntityRenderer_entity",selections:[{alias:null,args:[{kind:"Literal",name:"site",value:"w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49888	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:34 UTC	610	OUT	GET /rsrc.php/v3itnb4/yJ/l/en_US/E-kDMNoSf3K.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:34 UTC	1772	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 2OqnsRVWwaWvbAUaJcu8Jw== Expires: Sat, 26 Apr 2025 04:11:34 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: JBt+CVjWye+E2O3c+3Q5D2EmS/wsTiz6JuvE2JeWhT/bsFa4UbjksXaVSokhuA2JJaqppG9SU8uJVtM1o9DCaQ== Date: Fri, 26 Apr 2024 04:11:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3414, tp=-1, tpl=-1, uplat=38, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 60710
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 36 32 39 38 30 39 34 35 30 33 39 35 34 31 35 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 Data Ascii: ;/FB_PKG_DELIM/__d("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7629809450395415"}),null);__d("GroupsCometAnswerAgentEducationModalQuery$Parameters",["GroupsCometAnswerAgentEducationModalQuer
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 49 6d 61 67 65 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 4d 65 74 61 42 72 61 6e 64 49 43 69 72 63 6c 65 4f 75 74 6c 69 6e 65 32 34 2e 73 76 67 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 69 2e 6a 73 78 73 28 22 73 76 67 22 2c 62 61 62 65 6c 48 65 6c 70 Data Ascii: nd:"ScalarField",name:"width",storageKey:null}],type:"Image",abstractKey:null};e.exports=a}),null);__d("MetaBrandICircleOutline24.svg.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(a){return i.jsxs("svg",babelHelp
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 6e 22 2c 62 6f 72 64 65 72 54 6f 70 53 74 79 6c 65 3a 22 78 31 33 66 75 76 32 30 22 2c 62 6f 72 64 65 72 45 6e 64 53 74 79 6c 65 3a 22 78 75 33 6a 35 62 33 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 79 6c 65 3a 22 78 31 71 30 71 38 6d 35 22 2c 62 6f 72 64 65 72 53 74 61 72 74 53 74 79 6c 65 3a 22 78 32 36 75 37 71 69 22 2c 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 3a 22 78 31 37 38 78 74 38 7a 22 2c 62 6f 72 64 65 72 45 6e 64 57 69 64 74 68 3a 22 78 6d 38 31 76 73 34 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 3a 22 78 73 6f 30 33 31 6c 22 2c 62 6f 72 64 65 72 53 74 61 72 74 57 69 64 74 68 3a 22 78 79 38 30 63 6c 76 22 2c 6f 76 65 72 66 6c 6f 77 58 3a 22 78 36 69 6b 6d 38 72 22 2c 6f 76 65 72 66 6c 6f 77 59 3a 22 78 31 30 77 6c 74 36 32 Data Ascii: n",borderTopStyle:"x13fuv20",borderEndStyle:"xu3j5b3",borderBottomStyle:"x1q0q8m5",borderStartStyle:"x26u7qi",borderTopWidth:"x178xt8z",borderEndWidth:"xm81vs4",borderBottomWidth:"xso031l",borderStartWidth:"xy80clv",overflowX:"x6ikm8r",overflowY:"x10wlt62
2024-04-26 04:11:34 UTC	1319	IN	Data Raw: 3d 61 2e 61 6e 63 68 6f 72 52 6f 6f 74 52 65 66 43 6f 6e 74 65 78 74 2c 64 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2c 65 3d 61 2e 63 68 69 6c 64 72 65 6e 2c 66 3d 61 2e 63 6f 6e 74 65 78 74 52 65 66 2c 67 3d 61 2e 63 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 50 72 6f 70 73 2c 68 3d 61 2e 69 6d 70 65 72 61 74 69 76 65 52 65 66 2c 6b 3d 61 2e 73 63 72 6f 6c 6c 61 62 6c 65 41 72 65 61 43 6f 6e 74 65 78 74 3b 61 3d 63 28 22 75 73 65 43 6f 6d 65 74 44 69 73 70 6c 61 79 54 69 6d 69 6e 67 54 72 61 63 6b 65 72 46 6f 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 29 28 22 46 44 53 43 61 6c 6c 6f 75 74 4d 61 6e 61 67 65 72 22 29 3b 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6b 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 Data Ascii: =a.anchorRootRefContext,d=a.animationContext,e=a.children,f=a.contextRef,g=a.contextualLayerProps,h=a.imperativeRef,k=a.scrollableAreaContext;a=c("useCometDisplayTimingTrackerForInteraction")("FDSCalloutManager");j(function(){var a=k.map(function(a){retur
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 66 61 6c 6c 62 61 63 6b 22 2c 22 70 6f 70 6f 76 65 72 52 65 73 6f 75 72 63 65 22 2c 22 70 72 65 6c 6f 61 64 54 72 69 67 67 65 72 22 2c 22 74 72 61 63 65 50 6f 6c 69 63 79 22 5d 29 3b 76 61 72 20 67 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 22 6c 61 7a 79 4c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 22 29 28 64 29 7d 2c 5b 64 5d 29 3b 66 3d 63 28 22 75 73 65 43 6f 6d 65 74 50 6f 70 6f 76 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 54 72 61 63 69 6e 67 22 29 28 28 66 3d 66 29 21 3d 6e 75 6c 6c 3f 66 3a 63 28 22 74 72 61 63 65 50 6f 6c 69 63 79 46 72 6f 6d 52 65 73 6f 75 72 63 65 22 29 28 22 63 6f 6d 65 74 2e 70 6f 70 6f Data Ascii: Helpers.objectWithoutPropertiesLoose(a,["fallback","popoverResource","preloadTrigger","tracePolicy"]);var g=j(function(){return c("lazyLoadComponent")(d)},[d]);f=c("useCometPopoverInteractionTracing")((f=f)!=null?f:c("tracePolicyFromResource")("comet.popo
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 33 2e 34 30 33 4c 35 2e 34 20 31 30 2e 39 34 63 2d 32 2e 30 32 36 20 32 2e 32 39 31 2d 35 2e 34 33 34 2e 36 32 2d 35 2e 34 2d 32 2e 36 34 38 56 2e 31 32 68 32 30 2e 36 38 34 7a 22 7d 29 5d 7d 29 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 61 2e 5f 69 73 53 56 47 3d 21 30 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 46 44 53 43 61 6c 6c 6f 75 74 45 64 67 65 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 43 6f 6e 74 65 78 74 53 69 7a 65 43 6f 6e 74 65 78 74 22 2c 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 4c 61 79 65 72 41 64 6a 75 73 74 6d 65 6e 74 43 6f 6e 74 65 78 74 22 2c 22 42 Data Ascii: 3.403L5.4 10.94c-2.026 2.291-5.434.62-5.4-2.648V.12h20.684z"})]}))}a.displayName=a.name+" [from "+f.id+"]";a._isSVG=!0;g["default"]=a}),98);__d("FDSCalloutEdge.react",["BaseContextualLayerContextSizeContext","BaseContextualLayerLayerAdjustmentContext","B
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 6c 6c 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 78 70 6b 32 74 6a 39 22 2c 24 24 63 73 73 3a 21 30 7d 2c 6d 69 64 64 6c 65 3a 7b 62 6f 74 74 6f 6d 3a 22 78 37 6f 66 7a 73 76 22 2c 65 6e 64 3a 22 78 64 73 36 38 37 63 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 24 24 63 73 73 3a 21 30 7d 2c 73 74 61 72 74 3a 7b 62 6f 74 74 6f 6d 3a 22 78 37 6f 66 7a 73 76 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 24 24 63 73 73 3a 21 30 7d 7d 2c 70 3d 7b 65 6e 64 3a 7b 24 24 63 73 73 3a 21 30 7d 2c 6d 69 64 64 6c 65 3a 7b 24 24 63 73 73 3a 21 30 7d 2c 73 74 61 72 74 3a 7b 24 24 63 73 73 3a 21 30 7d 7d 2c 71 3d 7b 65 6e 64 3a 7b 62 6f 74 74 6f 6d 3a 22 78 37 6f 66 7a 73 76 22 2c Data Ascii: ll,transform:"xpk2tj9",$$css:!0},middle:{bottom:"x7ofzsv",end:"xds687c",left:null,right:null,$$css:!0},start:{bottom:"x7ofzsv",start:"x17qophe",left:null,right:null,$$css:!0}},p={end:{$$css:!0},middle:{$$css:!0},start:{$$css:!0}},q={end:{bottom:"x7ofzsv",
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 74 65 78 74 22 29 29 2c 68 3d 67 2e 61 6c 69 67 6e 3b 67 3d 67 2e 70 6f 73 69 74 69 6f 6e 3b 68 3d 68 3d 3d 3d 22 73 74 72 65 74 63 68 22 3f 22 73 74 61 72 74 22 3a 68 3b 67 3d 67 3d 3d 3d 22 73 74 61 72 74 22 3f 22 61 62 6f 76 65 22 3a 67 3d 3d 3d 22 65 6e 64 22 3f 22 62 65 6c 6f 77 22 3a 67 3b 76 61 72 20 6f 3d 6a 28 63 28 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 43 6f 6e 74 65 78 74 53 69 7a 65 43 6f 6e 74 65 78 74 22 29 29 3b 62 3d 28 62 3d 6a 28 63 28 22 42 61 73 65 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 4c 61 79 65 72 41 64 6a 75 73 74 6d 65 6e 74 43 6f 6e 74 65 78 74 22 29 29 29 21 3d 6e 75 6c 6c 3f 62 3a 30 3b 68 3d 62 21 3d 3d 30 3f 77 28 68 29 3a 68 3b 6f 3d 7a 28 68 2c 28 6f 3d 6f 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: text")),h=g.align;g=g.position;h=h==="stretch"?"start":h;g=g==="start"?"above":g==="end"?"below":g;var o=j(c("BaseContextualLayerContextSizeContext"));b=(b=j(c("BaseContextualLayerLayerAdjustmentContext")))!=null?b:0;h=b!==0?w(h):h;o=z(h,(o=o==null?void 0
2024-04-26 04:11:34 UTC	910	IN	Data Raw: 6c 65 78 22 29 29 29 28 64 29 2c 68 65 69 67 68 74 3a 22 31 32 70 78 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 31 20 31 32 22 2c 77 69 64 74 68 3a 22 32 31 70 78 22 7d 2c 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 61 2e 74 69 74 6c 65 21 3d 6e 75 6c 6c 26 26 6a 2e 6a 73 78 28 22 74 69 74 6c 65 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 61 2e 74 69 74 6c 65 7d 29 2c 62 21 3d 6e 75 6c 6c 26 26 6a 2e 6a 73 78 28 22 64 65 66 73 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 62 7d 29 2c 6a 2e 6a 73 78 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 30 2e 36 38 35 2e 31 32 63 2d 32 2e 32 32 39 2e 34 32 34 2d 34 2e 32 37 38 20 31 2e 39 31 34 2d 36 2e 31 38 31 20 33 2e 34 30 33 4c 35 2e 34 20 31 30 2e 39 34 63 2d 32 2e 30 32 36 20 32 2e 32 39 31 2d 35 2e 34 33 34 2e 36 32 2d 35 2e 34 Data Ascii: lex")))(d),height:"12px",viewBox:"0 0 21 12",width:"21px"},a,{children:[a.title!=null&&j.jsx("title",{children:a.title}),b!=null&&j.jsx("defs",{children:b}),j.jsx("path",{d:"M20.685.12c-2.229.424-4.278 1.914-6.181 3.403L5.4 10.94c-2.026 2.291-5.434.62-5.4
2024-04-26 04:11:34 UTC	1500	IN	Data Raw: 6d 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 39 6a 68 66 34 63 22 2c 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 3a 22 78 31 37 38 78 74 38 7a 22 2c 62 6f 72 64 65 72 45 6e 64 57 69 64 74 68 3a 22 78 6d 38 31 76 73 34 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 3a 22 78 73 6f 30 33 31 6c 22 2c 62 6f 72 64 65 72 53 74 61 72 74 57 69 64 74 68 3a 22 78 79 38 30 63 6c 76 22 2c 62 6f 78 53 68 61 64 6f 77 3a 22 78 6f 66 68 73 31 6c 22 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 22 78 31 79 65 33 67 6f 75 22 2c 70 61 64 64 69 6e 67 4c 65 66 74 3a 6e 75 6c 6c 2c 70 61 64 64 69 6e 67 52 69 67 68 74 3a 6e 75 6c 6c 2c 70 61 64 64 69 6e 67 45 6e 64 3a 22 78 6e 36 37 30 38 64 22 2c 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 79 61 6d 61 79 39 22 2c 70 61 64 64 69 Data Ascii: mStartRadius:"x9jhf4c",borderTopWidth:"x178xt8z",borderEndWidth:"xm81vs4",borderBottomWidth:"xso031l",borderStartWidth:"xy80clv",boxShadow:"xofhs1l",paddingStart:"x1ye3gou",paddingLeft:null,paddingRight:null,paddingEnd:"xn6708d",paddingTop:"xyamay9",paddi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49889	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:34 UTC	599	OUT	GET /rsrc.php/v3/y1/r/K4XTICDgjGx.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:34 UTC	1772	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: pq4U4ZbsGpmTrjqObvJaZw== Expires: Thu, 24 Apr 2025 12:33:29 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: xxbwtkn1VFe8wO/V9wEe7X7c58rLAqvN4AcVnW9AlaggHBEe0+zEV9I2SHt8FxZRsVEbHwDE4O5Xpwlx/e9FGg== Date: Fri, 26 Apr 2024 04:11:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 36892
2024-04-26 04:11:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:34 UTC	16045	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 75 73 70 65 6e 73 65 4c 69 73 74 2e 72 65 61 63 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 53 75 73 70 65 6e 73 65 4c 69 73 74 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 75 73 65 50 61 72 74 69 61 6c 56 69 65 77 49 6d 70 72 65 73 73 69 6f 6e 22 2c 5b 22 75 73 65 56 69 73 69 62 69 6c 69 74 79 4f 62 73 65 72 76 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 Data Ascii: /FB_PKG_DELIM/__d("CometSuspenseList.react",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.unstable_SuspenseList;g["default"]=b}),98);__d("usePartialViewImpression",["useVisibilityObserver"],(function(a,b,c,d,e,f,g){"use st
2024-04-26 04:11:34 UTC	16384	IN	Data Raw: 62 28 67 29 3a 67 2e 67 65 74 50 6c 61 79 68 65 61 64 50 6f 73 69 74 69 6f 6e 28 29 3b 69 66 28 68 2e 63 75 72 72 65 6e 74 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 68 2e 63 75 72 72 65 6e 74 3d 63 28 22 73 65 74 54 69 6d 65 6f 75 74 22 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 69 2e 63 75 72 72 65 6e 74 29 2c 68 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 7d 2c 61 29 7d 29 3b 66 28 67 2e 67 65 74 50 6c 61 79 68 65 61 64 50 6f 73 69 74 69 6f 6e 28 29 29 3b 72 65 74 75 72 6e 20 64 2e 72 65 6d 6f 76 65 7d 2c 5b 67 2c 61 5d 29 3b 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 63 75 72 72 65 6e 74 21 3d 3d 6e 75 6c 6c 26 26 28 63 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 29 28 68 2e 63 75 72 72 65 6e 74 29 Data Ascii: b(g):g.getPlayheadPosition();if(h.current!=null)return;h.current=c("setTimeout")(function(){f(i.current),h.current=null},a)});f(g.getPlayheadPosition());return d.remove},[g,a]);l(function(){return function(){h.current!==null&&(c("clearTimeout")(h.current)
2024-04-26 04:11:34 UTC	4462	IN	Data Raw: 72 74 3a 67 7d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 4c 6f 67 67 69 6e 67 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 61 67 65 6c 65 74 49 6d 70 6c 2e 72 65 61 63 74 22 2c 5b 22 68 65 72 6f 2d 74 72 61 63 69 6e 67 22 5d Data Ascii: rt:g})}g["default"]=a}),98);__d("CometFeedUnitLoggingContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({position:null,renderLocation:null});g["default"]=b}),98);__d("CometPageletImpl.react",["hero-tracing"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49890	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	610	OUT	GET /rsrc.php/v3i_8K4/yu/l/en_US/RRm2quQ_ymn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	1747	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: M6MADuzneErNPz9Um9aGgQ== Expires: Fri, 25 Apr 2025 00:56:41 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: peNr+G8LjH7xjQgX0dZCvLFSk61kmq1LbdGUnjIXM7vYI3cjns2Sz6urkuYROPImni3DX9pdHFzVqtQtSoHMqA== Date: Fri, 26 Apr 2024 04:11:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 471771
2024-04-26 04:11:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:35 UTC	16058	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 35 34 36 35 39 36 32 32 32 30 36 31 36 30 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 Data Ascii: /FB_PKG_DELIM/__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChange
2024-04-26 04:11:35 UTC	16384	IN	Data Raw: 72 65 61 63 74 22 29 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 61 2c 66 6f 6f 74 65 72 3a 6a 2e 6a 73 78 28 63 28 22 46 44 53 44 69 61 6c 6f 67 46 6f 6f 74 65 72 2e 72 65 61 63 74 22 29 2c 7b 65 78 70 61 6e 64 69 6e 67 3a 21 31 2c 70 72 69 6d 61 72 79 3a 7b 6c 61 62 65 6c 3a 28 65 3d 65 29 21 3d 6e 75 6c 6c 3f 65 3a 68 2e 5f 28 22 43 6c 6f 73 65 22 29 2c 6f 6e 50 72 65 73 73 3a 62 2c 74 65 73 74 69 64 3a 22 43 6f 6d 65 74 41 6c 65 72 74 44 69 61 6c 6f 67 49 6d 70 6c 2d 63 6c 6f 73 65 42 75 74 74 6f 6e 22 7d 7d 29 2c 68 65 61 64 65 72 3a 6a 2e 6a 73 78 28 63 28 22 46 44 53 44 69 61 6c 6f 67 53 74 61 72 74 41 6c 69 67 6e 65 64 54 65 78 74 48 65 61 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 6f 6e 43 6c 6f 73 65 3a 62 2c 74 65 78 74 3a 61 7d 29 2c 6f 6e 43 6c Data Ascii: react"),{"aria-label":a,footer:j.jsx(c("FDSDialogFooter.react"),{expanding:!1,primary:{label:(e=e)!=null?e:h._("Close"),onPress:b,testid:"CometAlertDialogImpl-closeButton"}}),header:j.jsx(c("FDSDialogStartAlignedTextHeader.react"),{onClose:b,text:a}),onCl
2024-04-26 04:11:35 UTC	16384	IN	Data Raw: 6e 64 2d 76 2e 6a 73 6d 6f 64 73 53 74 61 72 74 3b 6c 28 69 5b 6d 3f 22 62 6c 6f 63 6b 69 6e 67 22 3a 22 6e 6f 6e 62 6c 6f 63 6b 69 6e 67 22 5d 2c 76 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 76 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 5b 76 2e 75 72 69 2c 21 31 5d 29 3b 66 6f 72 28 77 3d 63 28 22 6f 62 6a 65 63 74 45 6e 74 72 69 65 73 22 29 28 76 2e 72 73 72 63 73 29 2c 78 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 29 2c 76 3d 30 2c 77 3d 78 3f 77 3a 77 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 45 3b 69 66 28 78 29 7b 69 66 28 76 3e 3d 77 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 45 3d 77 Data Ascii: nd-v.jsmodsStart;l(i[m?"blocking":"nonblocking"],v.responseStart-v.requestStart,[v.uri,!1]);for(w=c("objectEntries")(v.rsrcs),x=Array.isArray(w),v=0,w=x?w:w[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var E;if(x){if(v>=w.length)break;E=w
2024-04-26 04:11:35 UTC	16384	IN	Data Raw: 74 54 69 6d 65 7a 6f 6e 65 55 70 64 61 74 65 72 22 29 2e 75 70 64 61 74 65 54 69 6d 65 7a 6f 6e 65 49 66 4e 65 63 65 73 73 61 72 79 28 29 7d 67 2e 69 6e 69 74 44 65 66 65 72 72 65 64 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 57 65 62 42 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 4c 69 74 65 22 2c 5b 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 62 28 22 67 65 6e 65 72 61 74 65 4c 69 74 65 54 79 70 65 64 4c 6f 67 67 65 72 22 29 28 22 6c 6f 67 67 65 72 3a 57 65 62 42 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 4c 6f 67 67 65 72 43 6f 6e 66 69 Data Ascii: tTimezoneUpdater").updateTimezoneIfNecessary()}g.initDeferred=a}),98);__d("WebBrowserDimensionsTypedLoggerLite",["generateLiteTypedLogger"],(function(a,b,c,d,e,f){"use strict";e.exports=b("generateLiteTypedLogger")("logger:WebBrowserDimensionsLoggerConfi
2024-04-26 04:11:35 UTC	1500	IN	Data Raw: 61 6c 75 65 4f 72 45 72 72 6f 72 3a 61 7d 7d 3b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 64 28 22 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 2e 42 49 4f 4d 45 54 52 49 43 5f 53 49 47 4e 41 4c 5f 43 4f 4c 4c 45 43 54 45 44 5f 45 56 45 4e 54 5f 4e 41 4d 45 2c 7b 64 65 74 61 69 6c 3a 61 7d 29 29 7d 3b 72 65 74 75 72 6e 20 61 7d 28 64 28 22 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 2e 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 29 2c 69 3d 6e 75 6c 6c 2c 6a 3d 7b 73 69 67 6e 61 6c 54 79 70 65 3a 33 30 31 30 30 2c 67 65 74 3a 66 75 6e 63 74 Data Ascii: alueOrError:a}};window.dispatchEvent(new CustomEvent(d("BDBiometricSignalCollectorBase").BIOMETRIC_SIGNAL_COLLECTED_EVENT_NAME,{detail:a}))};return a}(d("BDBiometricSignalCollectorBase").BDBiometricSignalCollectorBase),i=null,j={signalType:30100,get:funct
2024-04-26 04:11:36 UTC	14884	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 62 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 61 2c 62 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2e 73 69 67 6e 61 6c 54 79 70 65 29 7c 7c 74 68 69 73 7d 76 61 72 20 64 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 64 2e 65 78 65 63 75 74 65 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 3f 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 68 3a 2d 31 3b 61 3d 6e 65 77 28 63 28 22 4e 75 6d 62 65 72 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 22 29 29 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 Data Ascii: unction(b){babelHelpers.inheritsLoose(a,b);function a(){return b.call(this,j.signalType)\|\|this}var d=a.prototype;d.executeSignalCollection=function(){var a=navigator.mimeTypes?navigator.mimeTypes.length:-1;a=new(c("NumberSignalValueType"))(Date.now(),this
2024-04-26 04:11:36 UTC	16384	IN	Data Raw: 6f 6e 50 65 72 6d 69 73 73 69 6f 6e 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 32 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 56 65 6e 64 6f 72 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 33 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 41 70 70 56 65 72 73 69 6f 6e 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 35 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 67 61 74 6f 72 50 6c 61 74 66 6f 72 6d 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 22 29 2e 67 65 74 28 29 3b 63 61 73 65 20 33 30 30 31 38 3a 72 65 74 75 72 6e 20 63 28 22 42 44 4e 61 76 69 Data Ascii: onPermissionSignalCollector").get();case 30012:return c("BDNavigatorVendorSignalCollector").get();case 30013:return c("BDNavigatorAppVersionSignalCollector").get();case 30015:return c("BDNavigatorPlatformSignalCollector").get();case 30018:return c("BDNavi
2024-04-26 04:11:36 UTC	16384	IN	Data Raw: 31 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 63 2e 6e 65 78 74 3d 32 3b 72 65 74 75 72 6e 20 62 28 22 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 22 29 2e 61 77 72 61 70 28 7a 2e 63 6f 6c 6c 65 63 74 53 74 61 74 69 63 53 69 67 6e 61 6c 73 28 29 29 3b 63 61 73 65 20 32 3a 7a 2e 5f 70 6f 73 74 53 69 67 6e 61 6c 73 48 65 6c 70 65 72 28 64 28 22 42 44 53 69 67 6e 61 6c 42 75 66 66 65 72 22 29 2e 67 65 74 53 69 67 6e 61 6c 73 41 73 4a 53 4f 4e 53 74 72 69 6e 67 28 61 29 2c 79 2e 4e 4f 4e 45 29 26 26 7a 2e 73 65 74 54 69 6d 65 73 74 61 6d 70 49 6e 53 74 6f 72 61 67 65 28 44 61 74 65 2e 6e 6f 77 28 29 2c 6b 29 3b 63 61 73 65 20 33 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 63 2e 73 74 6f 70 28 Data Ascii: 1)switch(c.prev=c.next){case 0:c.next=2;return b("regeneratorRuntime").awrap(z.collectStaticSignals());case 2:z._postSignalsHelper(d("BDSignalBuffer").getSignalsAsJSONString(a),y.NONE)&&z.setTimestampInStorage(Date.now(),k);case 3:case"end":return c.stop(
2024-04-26 04:11:36 UTC	14884	IN	Data Raw: 6f 61 64 29 3b 63 2e 68 65 61 64 65 72 73 3d 75 28 62 2e 68 65 61 64 65 72 73 29 3b 63 2e 65 78 74 72 61 48 65 61 64 65 72 3d 72 28 62 2e 65 78 74 72 61 48 65 61 64 65 72 29 3b 63 2e 72 65 71 75 65 73 74 54 61 72 67 65 74 3d 72 28 62 2e 72 65 71 75 65 73 74 54 61 72 67 65 74 29 3b 63 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 44 61 74 61 3d 72 28 62 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 44 61 74 61 29 3b 72 65 74 75 72 6e 20 63 7d 3b 72 65 74 75 72 6e 20 61 7d 28 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 61 2e 72 65 61 64 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 61 28 29 3b 63 2e 73 74 72 65 61 6d 49 64 3d 6f 28 62 2e 73 74 72 65 61 6d 49 64 29 3b 63 Data Ascii: oad);c.headers=u(b.headers);c.extraHeader=r(b.extraHeader);c.requestTarget=r(b.requestTarget);c.instrumentationData=r(b.instrumentationData);return c};return a}(),i=function(){function a(){}a.readObject=function(b){var c=new a();c.streamId=o(b.streamId);c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49892	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	610	OUT	GET /rsrc.php/v3ieKI4/yE/l/en_US/-bsZwTn4aTy.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	1772	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: n4Y+AN5rV+P28xDphaGQHA== Expires: Fri, 25 Apr 2025 21:09:17 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: bdk6j4OsIkeKXKcqVgC692XEKjVyU0sJ5wgcXP4HwaRupurZwWNDJOw4qhIYFOXTN7SCh1Pfx5fstXdEN96NlQ== Date: Fri, 26 Apr 2024 04:11:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 32773
2024-04-26 04:11:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:35 UTC	16033	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 6f 63 75 73 47 72 6f 75 70 46 69 72 73 74 4c 65 74 74 65 72 4e 61 76 69 67 61 74 69 6f 6e 22 2c 5b 22 69 73 53 74 72 69 6e 67 4e 75 6c 6c 4f 72 45 6d 70 74 79 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 62 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 76 61 72 20 69 3d 62 2e 75 73 65 45 66 66 65 63 74 2c 6a 3d 62 2e 75 73 65 53 74 61 74 65 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 6c 69 63 65 28 30 2c 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 6a 28 Data Ascii: /FB_PKG_DELIM/__d("CometFocusGroupFirstLetterNavigation",["isStringNullOrEmpty","react"],(function(a,b,c,d,e,f,g){"use strict";var h;b=h\|\|d("react");var i=b.useEffect,j=b.useState,k=function(a){return a.slice(0,1).toLowerCase()};function a(a){var b=j(
2024-04-26 04:11:35 UTC	16384	IN	Data Raw: 5b 31 5d 3b 62 5b 67 5d 3d 66 7d 67 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 6b 29 3b 66 6f 72 28 66 3d 30 3b 66 3c 67 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 63 3d 67 5b 66 5d 3b 65 3d 63 5b 30 5d 3b 63 3d 63 5b 31 5d 3b 62 5b 65 5d 3d 63 7d 69 66 28 21 6a 29 7b 65 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 64 28 22 67 65 74 4d 44 53 49 63 6f 6e 43 6f 6c 6f 72 43 6f 6d 65 74 46 61 6c 6c 62 61 63 6b 22 29 2e 4d 44 53 46 61 6c 6c 62 61 63 6b 54 79 70 65 73 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 67 3d 65 5b 63 5d 3b 66 3d 67 5b 30 5d 3b 67 3d 67 5b 31 5d 3b 62 5b 66 5d 3d 61 5b 67 5d 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 5b 61 5d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 Data Ascii: [1];b[g]=f}g=Object.entries(k);for(f=0;f<g.length;f++){c=g[f];e=c[0];c=c[1];b[e]=c}if(!j){e=Object.entries(d("getMDSIconColorCometFallback").MDSFallbackTypes);for(c=0;c<e.length;c++){g=e[c];f=g[0];g=g[1];b[f]=a[g]}}return b},[a])}g["default"]=a}),98);__d
2024-04-26 04:11:35 UTC	355	IN	Data Raw: 3d 6e 65 77 20 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 61 2c 74 68 69 73 2c 65 29 7d 3b 63 28 22 54 69 6d 65 53 6c 69 63 65 22 29 2e 63 6f 70 79 47 75 61 72 64 46 6f 72 57 72 61 70 70 65 72 28 61 2c 64 29 3b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 66 3d 6e 65 77 20 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 67 3d 31 3b 67 3c 65 3b 67 2b 2b 29 66 5b 67 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 67 5d 3b 62 3d 63 28 22 73 65 74 49 6d 6d 65 64 69 61 74 65 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 22 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 Data Ascii: =new Array(d),f=0;f<d;f++)e[f]=arguments[f];Function.prototype.apply.call(a,this,e)};c("TimeSlice").copyGuardForWrapper(a,d);for(var e=arguments.length,f=new Array(e>1?e-1:0),g=1;g<e;g++)f[g-1]=arguments[g];b=c("setImmediateAcrossTransitions").apply(void

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49891	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	599	OUT	GET /rsrc.php/v3/ye/r/mM84SfiWlvq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	1677	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Cj/k4oZeicUotP6wQUSFPQ== Expires: Wed, 16 Apr 2025 02:25:47 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: Y538dFYgrK7JfFrpuSyo90Bf2JyIj78CkWpuVITpD8o7tX5oyJhTvnjwgsnSh4nUfelA9E+7wpqhBc7Z9nnvmA== Date: Fri, 26 Apr 2024 04:11:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 15525
2024-04-26 04:11:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:35 UTC	15524	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 58 43 6f 6e 74 72 6f 6c 6c 65 72 55 52 49 42 75 69 6c 64 65 72 22 2c 5b 22 69 6e 76 61 72 69 61 6e 74 22 2c 22 55 52 49 22 2c 22 67 6b 78 22 2c 22 69 73 49 6e 74 65 72 6e 61 6c 46 42 55 52 49 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 76 61 72 20 69 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 74 68 69 73 2e 24 31 3d 7b 7d 2c 74 68 69 73 2e 24 32 3d 61 2c 74 68 69 73 2e 24 33 3d 62 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 73 65 74 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 65 74 50 61 72 61 6d 28 61 2c 22 49 6e 74 22 2c Data Ascii: /FB_PKG_DELIM/__d("XControllerURIBuilder",["invariant","URI","gkx","isInternalFBURI"],(function(a,b,c,d,e,f,g,h){var i;a=function(){function a(a,b){this.$1={},this.$2=a,this.$3=b}var b=a.prototype;b.setInt=function(a,b){return this.__setParam(a,"Int",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49893	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	599	OUT	GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	1761	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ogpXKXKWIQrlXCYwZDb85Q== Expires: Thu, 17 Apr 2025 13:50:49 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 1EmTlhZjESWEVFXwDjhIGzdj0so7KekWOFLOpHXovITvuKTomKCQOtGcnVup8yJsz/ig3YT3Lc342Osp56+r6g== Date: Fri, 26 Apr 2024 04:11:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43237
2024-04-26 04:11:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-26 04:11:35 UTC	16055	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 2f 74 33 68 4f 4c 73 38 77 6c 58 79 2f 0a 20 2a 2f 0a 5f 5f 64 28 22 62 69 67 6e 75 6d 62 65 72 2d 6a 73 2d 39 2e 30 2e 31 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 62 3d 7b 7d 3b 76 61 72 20 67 3d 7b 65 78 70 6f 72 74 73 3a 62 7d 2c 68 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 2f 5e 2d 3f 28 3f 3a 5c 64 2b 28 3f 3a 5c 2e 5c 64 2a 29 3f 7c 5c 2e 5c 64 2b 29 28 3f 3a 65 5b 2b 2d 5d 3f 5c 64 2b 29 3f 24 Data Ascii: /FB_PKG_DELIM//** * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ /__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$
2024-04-26 04:11:35 UTC	16384	IN	Data Raw: 61 2e 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 2c 69 3d 61 2e 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 7c 7c 22 22 2c 6a 3d 63 5b 30 5d 3b 63 3d 63 5b 31 5d 3b 64 3d 64 2e 73 3c 30 3b 76 61 72 20 6b 3d 64 3f 6a 2e 73 6c 69 63 65 28 31 29 3a 6a 2c 6c 3d 6b 2e 6c 65 6e 67 74 68 3b 68 26 26 28 65 3d 67 2c 67 3d 68 2c 68 3d 65 2c 6c 2d 3d 65 29 3b 69 66 28 67 3e 30 26 26 6c 3e 30 29 7b 65 3d 6c 25 67 7c 7c 67 3b 6a 3d 6b 2e 73 75 62 73 74 72 28 30 2c 65 29 3b 66 6f 72 28 3b 65 3c 6c 3b 65 2b 3d 67 29 6a 2b 3d 69 2b 6b 2e 73 75 62 73 74 72 28 65 2c 67 29 3b 68 3e 30 26 26 28 6a 2b 3d 69 2b 6b 2e 73 6c 69 63 65 28 65 29 29 3b 64 26 26 28 6a 3d 22 2d 22 2b 6a 29 7d 62 3d 63 3f 6a 2b 28 61 2e 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 7c 7c 22 Data Ascii: a.secondaryGroupSize,i=a.groupSeparator\|\|"",j=c[0];c=c[1];d=d.s<0;var k=d?j.slice(1):j,l=k.length;h&&(e=g,g=h,h=e,l-=e);if(g>0&&l>0){e=l%g\|\|g;j=k.substr(0,e);for(;e<l;e+=g)j+=i+k.substr(e,g);h>0&&(j+=i+k.slice(e));d&&(j="-"+j)}b=c?j+(a.decimalSeparator\|\|"
2024-04-26 04:11:35 UTC	10797	IN	Data Raw: 2c 33 38 37 30 39 35 32 38 35 37 2c 33 37 33 32 30 31 36 32 36 38 2c 37 36 35 36 35 34 38 32 34 2c 33 34 39 30 38 37 31 33 36 35 2c 32 35 31 31 38 33 36 34 31 33 2c 31 36 38 35 39 31 35 37 34 36 2c 33 38 38 38 39 36 39 32 30 30 2c 31 34 31 34 31 31 32 31 31 31 2c 32 32 37 33 31 33 34 38 34 32 2c 33 32 38 31 39 31 31 30 37 39 2c 34 30 38 30 39 36 32 38 34 36 2c 31 37 32 34 35 30 36 32 35 2c 32 35 36 39 39 39 34 31 30 30 2c 39 38 30 33 38 31 33 35 35 2c 34 31 30 39 39 35 38 34 35 35 2c 32 38 31 39 38 30 38 33 35 32 2c 32 37 31 36 35 38 39 35 36 30 2c 32 35 36 38 37 34 31 31 39 36 2c 33 36 38 31 34 34 36 36 36 39 2c 33 33 32 39 39 37 31 34 37 32 2c 31 38 33 35 34 37 38 30 37 31 2c 36 36 30 39 38 34 38 39 31 2c 33 37 30 34 36 37 38 34 30 34 2c 34 30 34 35 39 Data Ascii: ,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,40459

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49896	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	1007	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVpUXB-b1oU sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	541	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 70 61 67 65 73 25 32 46 42 72 69 73 62 61 6e 65 2d 50 61 69 6e 2d 52 65 68 61 62 69 6c 69 74 61 74 69 6f 6e 2d 53 65 72 76 69 63 65 2d 42 50 52 53 25 32 46 32 30 38 32 35 31 32 33 32 36 36 37 32 33 35 25 33 46 66 72 65 66 25 33 44 74 73 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 31 26 5f 5f 68 73 3d 31 39 38 33 39 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 47 4f 4f 44 26 5f 5f 72 65 76 3d 31 30 31 33 30 36 38 34 32 39 26 5f 5f 73 3d 75 38 31 32 61 6f 25 33 41 72 33 68 62 35 31 25 33 41 6b 75 6b 72 73 33 26 5f 5f 68 73 69 3d 37 33 36 32 30 32 33 35 39 35 39 Data Ascii: route_urls[0]=%2Fpages%2FBrisbane-Pain-Rehabilitation-Service-BPRS%2F208251232667235%3Ffref%3Dts&__aaid=0&__user=0&__a=1&__req=1&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__hsi=73620235959
2024-04-26 04:11:36 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:36 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:36 UTC	1818	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:36 UTC	5	IN	Data Raw: 65 30 64 0d 0a Data Ascii: e0d
2024-04-26 04:11:36 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 70 61 67 65 73 2f 42 72 69 73 62 61 6e 65 2d 50 61 69 6e 2d 52 65 68 61 62 69 6c 69 74 61 74 69 6f 6e 2d 53 65 72 76 69 63 65 2d 42 50 52 53 2f 32 30 38 32 35 31 32 33 32 36 36 37 32 33 35 3f 66 72 65 66 3d 74 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 45 72 72 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 7d 5d 2c 22 72 65 73 6f 75 72 63 65 Data Ascii: for (;;);{"payload":{"payloads":{"/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometErrorRoot.react"}],"resource
2024-04-26 04:11:36 UTC	1500	IN	Data Raw: 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 73 6b 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 72 65 66 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 7b 6e 61 6d 65 7d 2f 7b 70 61 67 65 5f 74 Data Ascii: se,"coercibleType":"STRING"},"sk":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"ENUM"},"ref":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"}},"routePath":"/pages/{name}/{page_t
2024-04-26 04:11:36 UTC	604	IN	Data Raw: 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 63 22 3a 31 2c 22 70 22 3a 22 3a 32 37 22 7d 7d 2c 22 63 6f 6d 70 4d 61 70 22 3a 7b 22 43 6f 6d 65 74 45 72 72 6f 72 52 6f 6f 74 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 67 4f 53 64 70 45 30 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 35 53 46 57 6b 44 74 22 2c 22 56 72 5a 79 52 7a 6a 22 2c 22 68 65 51 39 68 6c 38 22 2c 22 6d 76 4b 31 6f 42 74 22 5d 2c 22 72 64 66 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 44 53 54 6f 6f 6c 74 69 70 44 65 66 65 72 72 65 64 49 6d 70 6c 2e 72 65 61 63 74 22 5d 2c 22 72 22 3a 5b 22 58 51 37 39 31 30 72 22 5d 7d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 43 Data Ascii: js?_nc_x=Ij3Wp8lg5Kz","c":1,"p":":27"}},"compMap":{"CometErrorRoot.react":{"r":["gOSdpE0","R5w1rCJ","5SFWkDt","VrZyRzj","heQ9hl8","mvK1oBt"],"rdfds":{"m":["FDSTooltipDeferredImpl.react"],"r":["XQ7910r"]},"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent","C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49895	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	1007	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 679 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVpUXB-b1oU sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	679	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 6c 6f 67 69 6e 25 32 46 64 65 76 69 63 65 2d 62 61 73 65 64 25 32 46 72 65 67 75 6c 61 72 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 25 33 44 31 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 35 32 46 70 61 67 65 73 25 32 35 32 46 42 72 69 73 62 61 6e 65 2d 50 61 69 6e 2d 52 65 68 61 62 69 6c 69 74 61 74 69 6f 6e 2d 53 65 72 76 69 63 65 2d 42 50 52 53 25 32 35 32 46 32 30 38 32 35 31 32 33 32 36 36 37 32 33 35 25 32 35 33 46 66 72 65 66 25 32 35 33 44 74 73 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f Data Ascii: route_urls[0]=%2F&route_urls[1]=%2Flogin%2Fdevice-based%2Fregular%2Flogin%2F%3Flogin_attempt%3D1%26next%3Dhttps%253A%252F%252Fwww.facebook.com%252Fpages%252FBrisbane-Pain-Rehabilitation-Service-BPRS%252F208251232667235%253Ffref%253Dts&__aaid=0&__user=0&__
2024-04-26 04:11:36 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:36 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:36 UTC	1822	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:36 UTC	5	IN	Data Raw: 31 62 31 0d 0a Data Ascii: 1b1
2024-04-26 04:11:36 UTC	440	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 70 61 67 65 73 5c 75 30 30 32 35 32 46 42 72 69 73 62 61 6e 65 2d 50 61 69 6e 2d 52 65 68 61 62 69 6c 69 74 61 74 69 6f 6e 2d 53 65 72 76 69 63 65 2d 42 50 52 53 5c 75 30 30 32 35 32 46 32 30 38 32 35 31 32 33 32 36 36 37 32 33 35 5c Data Ascii: for (;;);{"payload":{"payloads":{"/":{"error":false,"result":null},"/login/device-based/regular/login/?login_attempt=1&next=https\u00253A\u00252F\u00252Fwww.facebook.com\u00252Fpages\u00252FBrisbane-Pain-Rehabilitation-Service-BPRS\u00252F208251232667235\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49894	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	965	OUT	GET /images/comet/empty_states_icons/permissions/permissions_gray_wash.svg HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:36 UTC	1942	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Edge-Control: cache-maxage=86400s Expires: Fri, 26 Apr 2024 08:23:00 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-04-26 04:11:36 UTC	496	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"X-Content-Type-Options: nosnifftiming-allow-origin: *Strict-Transport-Security: max-age=15552
2024-04-26 04:11:36 UTC	1009	IN	Data Raw: 33 65 35 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 32 20 31 31 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 31 30 30 2e 33 31 20 31 30 31 2e 31 48 33 39 2e 34 35 56 31 32 2e 38 68 34 30 2e 37 38 6c 32 30 2e 30 38 20 32 31 2e 30 33 76 36 37 2e 32 37 7a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 38 2e 35 34 20 33 39 2e 36 39 68 31 2e 38 32 61 31 31 2e 37 38 20 31 31 2e 37 38 20 30 20 30 31 31 31 2e 37 38 Data Ascii: 3e5<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112"> <defs> <clipPath id="a"> <path fill="none" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/> </clipPath> </defs> <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49897	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	611	OUT	GET /rsrc.php/v3/yy/r/cXapvT5eNtc.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	1704	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: erMSut4/STLFT6o7DAp3dA== Expires: Fri, 25 Apr 2025 17:04:03 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: g+KLI2B1GO8TMfcubyZJNmA70WfyZkkPlG0S1rNXdqCX8nrBzrhMa4bctHYM/XhV5iEJJyxpFJi8lrjb6qzijw== Date: Fri, 26 Apr 2024 04:11:35 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=149, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7943
2024-04-26 04:11:35 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:35 UTC	7942	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 cc 08 03 00 00 00 11 77 52 66 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 09 09 09 00 00 00 06 06 06 05 05 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 05 05 05 04 04 04 03 03 03 04 04 04 ff ff ff 00 00 00 02 02 02 01 01 01 01 01 01 00 00 00 00 00 00 01 01 01 02 02 02 ff ff ff 01 01 01 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 02 02 02 00 00 00 08 08 08 00 00 00 01 01 01 ff ff ff 01 01 01 01 01 01 01 01 01 02 02 02 04 04 04 05 05 05 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 b7 b7 b7 02 02 02 01 01 01 04 04 04 e5 e8 Data Ascii: PNGIHDRwRfPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49899	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:35 UTC	1254	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=3&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 566 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7XWAxBb7P3sMByDb sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:35 UTC	566	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 58 57 41 78 42 62 37 50 33 73 4d 42 79 44 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 36 39 34 35 35 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 58 57 41 78 42 62 37 50 33 73 4d 42 79 44 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 72 65 71 75 69 72 65 5f 63 6f 6e 64 5f 65 78 70 6f 73 75 72 65 5f 6c 6f 67 67 Data Ascii: ------WebKitFormBoundary7XWAxBb7P3sMByDbContent-Disposition: form-data; name="ts"1714104694557------WebKitFormBoundary7XWAxBb7P3sMByDbContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["require_cond_exposure_logg
2024-04-26 04:11:36 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:36 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:36 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49900	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	375	OUT	GET /rsrc.php/v3/yy/r/cXapvT5eNtc.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:36 UTC	1678	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: erMSut4/STLFT6o7DAp3dA== Expires: Fri, 25 Apr 2025 17:22:49 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: Hfx7JbRdZOhx27Td5yDUftCRk6ghXFR3OhFljtrfwdJgyIsXTQml8Btjl1V+ZXhxZC88aueymYZuyW+pLerMSg== Date: Fri, 26 Apr 2024 04:11:36 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7943
2024-04-26 04:11:36 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:36 UTC	7942	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 cc 08 03 00 00 00 11 77 52 66 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 09 09 09 00 00 00 06 06 06 05 05 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 05 05 05 04 04 04 03 03 03 04 04 04 ff ff ff 00 00 00 02 02 02 01 01 01 01 01 01 00 00 00 00 00 00 01 01 01 02 02 02 ff ff ff 01 01 01 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 02 02 02 00 00 00 08 08 08 00 00 00 01 01 01 ff ff ff 01 01 01 01 01 01 01 01 01 02 02 02 04 04 04 05 05 05 00 00 00 01 01 01 00 00 00 01 01 01 00 00 00 b7 b7 b7 02 02 02 01 01 01 04 04 04 e5 e8 Data Ascii: PNGIHDRwRfPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49901	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	409	OUT	GET /images/comet/empty_states_icons/permissions/permissions_gray_wash.svg HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:36 UTC	1942	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Edge-Control: cache-maxage=86400s Expires: Fri, 26 Apr 2024 08:23:00 GMT Cache-Control: public,max-age=86400 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-04-26 04:11:36 UTC	496	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 31 35 35 35 32 Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"X-Content-Type-Options: nosnifftiming-allow-origin: *Strict-Transport-Security: max-age=15552
2024-04-26 04:11:36 UTC	1009	IN	Data Raw: 33 65 35 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 32 20 31 31 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 31 30 30 2e 33 31 20 31 30 31 2e 31 48 33 39 2e 34 35 56 31 32 2e 38 68 34 30 2e 37 38 6c 32 30 2e 30 38 20 32 31 2e 30 33 76 36 37 2e 32 37 7a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 38 2e 35 34 20 33 39 2e 36 39 68 31 2e 38 32 61 31 31 2e 37 38 20 31 31 2e 37 38 20 30 20 30 31 31 31 2e 37 38 Data Ascii: 3e5<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112"> <defs> <clipPath id="a"> <path fill="none" d="M100.31 101.1H39.45V12.8h40.78l20.08 21.03v67.27z"/> </clipPath> </defs> <path d="M38.54 39.69h1.82a11.78 11.78 0 0111.78

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49902	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0; expires=Thu, 25-Jul-2024 04:11:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:37 UTC	2559	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4c 76 5a 78 66 77 49 71 46 66 68 56 69 71 68 64 5a 4e 49 59 5f 6d 34 55 5a 6b 61 6a 6a 47 58 66 6d 74 4e 54 5a 4e 6a 4a 72 6c 4f 66 78 70 57 45 66 31 51 2d 37 51 35 57 50 45 74 67 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4b 56 53 30 4a 66 63 53 77 32 37 61 53 45 75 4f 46 6a 72 37 4b 77 47 58 47 5a 55 43 75 4c 48 34 43 5f 39 36 62 4e 5f 63 32 47 59 46 46 79 7a 71 32 59 74 77 59 71 6f 59 49 6b 59 67 47 48 75 6c 4c 6e 6f 59 50 36 61 62 6f 47 36 58 51 56 7a 65 31 4f 5f 2d 4a 51 5f 6d 74 4e 54 51 52 4d 75 6e 4a 33 4a 5a 41 62 65 51 42 7a 71 4e 47 64 35 51 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcLvZxfwIqFfhViqhdZNIY_m4UZkajjGXfmtNTZNjJrlOfxpWEf1Q-7Q5WPEtg"; e_clientaddr="AcKVS0JfcSw27aSEuOFjr7KwGXGZUCuLH4C_96bN_c2GYFFyzq2YtwYqoYIkYgGHulLnoYP6aboG6XQVze1O_-JQ_mtNTQRMunJ3JZAbeQBzqNGd5Q"; e_fb_
2024-04-26 04:11:37 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 31 34 39 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 34 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 38 34 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=149, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=84, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-26 04:11:37 UTC	1335	IN	Data Raw: 64 39 62 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 38 45 38 45 56 7a 37 72 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: d9b9<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="8E8EVz7r">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f Data Ascii: een and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="o
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 39 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 Data Ascii: 0935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 47 5f 41 53 59 4e 43 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f Data Ascii: G_ASYNC",null]},-1],["cr:696703",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNo
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 74 69 6d 65 6f 75 74 22 3a 36 30 30 30 30 2c 22 74 69 65 72 65 64 4c 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 37 33 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 Data Ascii: :false,"timeout":60000,"tieredLoadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2273,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"transla
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 41 50 50 5f 49 44 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 49 53 5f 42 55 53 49 4e 45 53 53 5f 44 4f 4d 41 49 4e 22 3a 66 61 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 70 58 33 4e 5a 77 41 78 77 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 36 38 34 32 39 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 36 38 34 32 39 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 39 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 Data Ascii: APP_ID":"256281040558","IS_BUSINESS_DOMAIN":false},270],["LSD",[],{"token":"AVpX3NZwAxw"},323],["SiteData",[],{"server_revision":1013068429,"client_revision":1013068429,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19839.BP:DEFAULT.2.0..0.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49903	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	1308	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=4&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary4E8MRhYXGdJfTq6H sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT
2024-04-26 04:11:36 UTC	1015	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 45 38 4d 52 68 59 58 47 64 4a 66 54 71 36 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 36 39 35 34 37 32 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 45 38 4d 52 68 59 58 47 64 4a 66 54 71 36 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundary4E8MRhYXGdJfTq6HContent-Disposition: form-data; name="ts"1714104695472------WebKitFormBoundary4E8MRhYXGdJfTq6HContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-04-26 04:11:37 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49904	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	608	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	1670	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Thu, 17 Apr 2025 05:10:44 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: YzB5Iy88JVBx1nSf3jsPVsxm21wxJaCskqGAqArGbrasmnYt2uJJ+ynAFJNVhQcFwkRUVpr/sLXKg7JmycPRKA== Date: Fri, 26 Apr 2024 04:11:37 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-26 04:11:37 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-26 04:11:37 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49905	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	1308	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=5&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 4737 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryXUxMetuIjV6le2um sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT
2024-04-26 04:11:36 UTC	4737	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 58 55 78 4d 65 74 75 49 6a 56 36 6c 65 32 75 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 36 39 35 35 36 34 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 58 55 78 4d 65 74 75 49 6a 56 36 6c 65 32 75 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c ed 59 57 Data Ascii: ------WebKitFormBoundaryXUxMetuIjV6le2umContent-Disposition: form-data; name="ts"1714104695564------WebKitFormBoundaryXUxMetuIjV6le2umContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxYW
2024-04-26 04:11:37 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49906	31.13.67.20	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:36 UTC	632	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	421	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Fri, 26 Apr 2024 04:11:37 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Fri, 26 Apr 2024 04:11:37 GMT X-FB-Connection-Quality: MODERATE; q=0.3, rtt=150, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-26 04:11:37 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:37 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49907	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo; expires=Thu, 25-Jul-2024 04:11:37 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:37 UTC	2731	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 4e 54 45 5f 4d 6c 6b 74 7a 6a 33 4c 6c 5f 73 7a 35 78 45 45 64 35 67 75 47 35 68 33 72 69 67 4e 6c 50 59 66 4a 43 45 33 49 51 47 4e 42 37 69 4c 6d 50 6c 42 79 47 75 4f 41 35 41 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 49 4b 47 54 4c 55 47 72 71 74 77 59 6a 32 45 53 61 41 68 65 72 45 58 35 50 64 37 74 6f 5f 4f 79 55 38 41 72 55 44 66 31 65 64 61 4f 53 6c 33 37 7a 31 45 64 7a 4b 65 64 42 70 37 33 4d 62 49 38 4b 32 65 75 4c 78 51 49 7a 57 73 55 66 57 37 45 53 73 73 57 77 5f 65 51 56 4d 70 75 57 78 44 59 78 6d 72 6b 62 6c 64 47 50 39 4f 33 61 39 43 77 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJNTE_Mlktzj3Ll_sz5xEEd5guG5h3rigNlPYfJCE3IQGNB7iLmPlByGuOA5A"; e_clientaddr="AcIKGTLUGrqtwYj2ESaAherEX5Pd7to_OyU8ArUDf1edaOSl37z1EdzKedBp73MbI8K2euLxQIzWsUfW7ESssWw_eQVMpuWxDYxmrkbldGP9O3a9Cw"; e_fb_
2024-04-26 04:11:37 UTC	6	IN	Data Raw: 64 39 63 30 0d 0a Data Ascii: d9c0
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 53 6f 67 65 4c 49 61 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="MSogeLIa">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 73 6b 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 61 6e 79 22 20 68 72 65 66 3d 22 Data Ascii: route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel="mask-icon" sizes="any" href="
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 7d 2c 22 6a 75 73 74 6b 6e 6f 62 78 44 61 74 61 22 3a 7b 22 32 32 36 39 22 3a Data Ascii: sh":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"20948":{"result":true,"hash":null},"25572":{"result":false,"hash":null},"25571":{"result":false,"hash":null}},"justknobxData":{"2269":
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 32 66 35 77 5a 75 67 74 66 69 6a 4f 57 49 48 70 54 32 50 59 71 43 22 7d 2c 31 34 31 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 43 52 45 41 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 44 45 4c 45 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 55 50 44 41 54 45 5f 4e 41 4d 45 22 2c 22 54 Data Ascii: Blue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"2f5wZugtfijOWIHpT2PYqC"},141],["KSConfig",[],{"killed":{"__set":["POCKET_MONSTERS_CREATE","POCKET_MONSTERS_DELETE","POCKET_MONSTERS_UPDATE_NAME","T
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 33 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 30 7d 2c 33 32 39 5d 2c 5b 22 43 53 53 4c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 6d 6f 64 75 6c 65 50 72 65 66 69 78 22 3a 22 42 4c 43 53 53 3a 22 2c 22 66 6f 72 63 65 50 6f 6c 6c 46 6f 72 42 6f 6f 74 6c 6f 61 Data Ascii: meoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryAbortNum":3,"translationRetryAbortTime":50},329],["CSSLoaderConfig",[],{"timeout":5000,"modulePrefix":"BLCSS:","forcePollForBootloa
2024-04-26 04:11:37 UTC	1500	IN	Data Raw: 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 39 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 74 69 65 Data Ascii: ush_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19839.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_rtl":false,"is_experimental_tie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49908	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=4&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0
2024-04-26 04:11:37 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49909	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	372	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	1707	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Sat, 19 Apr 2025 22:14:28 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: ASEAhP0LKuMSUBLjxrVbynqyuoG8hdVMmFyMXJcZXhr3jhVfBxCkUsLQ/dFpLuo+HSK6Uua6R9bYVOwKLFACQA== Date: Fri, 26 Apr 2024 04:11:37 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=149, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-26 04:11:37 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-26 04:11:37 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49910	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=5&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0
2024-04-26 04:11:37 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:37 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:37 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49911	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	396	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:37 UTC	417	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Fri, 26 Apr 2024 04:11:37 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Fri, 26 Apr 2024 04:11:37 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-26 04:11:37 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-26 04:11:37 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49912	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:37 UTC	1367	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=6&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 15857 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarySsTm43iKQaka29AY sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0VvpO69UyKSjFfEAd..BmKyl4..AAA.0.0.BmKyl4.AWV91QFZQH0
2024-04-26 04:11:37 UTC	15857	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 73 54 6d 34 33 69 4b 51 61 6b 61 32 39 41 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 36 39 36 35 36 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 53 73 54 6d 34 33 69 4b 51 61 6b 61 32 39 41 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c e5 bd 59 Data Ascii: ------WebKitFormBoundarySsTm43iKQaka29AYContent-Disposition: form-data; name="ts"1714104696567------WebKitFormBoundarySsTm43iKQaka29AYContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxY
2024-04-26 04:11:38 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:38 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:38 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49913	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:38 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=6&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
2024-04-26 04:11:38 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:38 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:38 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49916	142.250.217.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:40 UTC	655	OUT	GET /recaptcha/api.js?_=1714104698885 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:41 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 04:11:40 GMT Date: Fri, 26 Apr 2024 04:11:40 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:11:41 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 04:11:41 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-26 04:11:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49921	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:42 UTC	1369	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=7&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryI75ipELiFkLbpLJc sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
2024-04-26 04:11:42 UTC	1676	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 37 35 69 70 45 4c 69 46 6b 4c 62 70 4c 4a 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 37 30 31 33 36 38 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 37 35 69 70 45 4c 69 46 6b 4c 62 70 4c 4a 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 96 17 80 5b 5b Data Ascii: ------WebKitFormBoundaryI75ipELiFkLbpLJcContent-Disposition: form-data; name="ts"1714104701368------WebKitFormBoundaryI75ipELiFkLbpLJcContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-stream[[
2024-04-26 04:11:42 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:42 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:42 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49925	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:44 UTC	1365	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=8&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJ5AdqZhrKJ84QSfU sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
2024-04-26 04:11:44 UTC	943	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 35 41 64 71 5a 68 72 4b 4a 38 34 51 53 66 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 37 30 33 32 39 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4a 35 41 64 71 5a 68 72 4b 4a 38 34 51 53 66 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 6d 90 db Data Ascii: ------WebKitFormBoundaryJ5AdqZhrKJ84QSfUContent-Disposition: form-data; name="ts"1714104703295------WebKitFormBoundaryJ5AdqZhrKJ84QSfUContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxm
2024-04-26 04:11:44 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:44 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:44 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49927	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:45 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=8&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
2024-04-26 04:11:45 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:45 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:45 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49928	142.250.217.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:46 UTC	655	OUT	GET /recaptcha/api.js?_=1714104705011 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.painrehabilitation.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:46 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 04:11:46 GMT Date: Fri, 26 Apr 2024 04:11:46 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:11:46 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 04:11:46 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-26 04:11:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49933	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:47 UTC	1130	OUT	POST /ajax/webstorage/process_keys/?state=1 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 627 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVpUXB-b1oU sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo
2024-04-26 04:11:47 UTC	627	OUT	Data Raw: 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 53 65 73 73 69 6f 6e 5d 3d 32 30 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 62 61 6e 7a 61 69 25 33 41 6c 61 73 74 5f 73 74 6f 72 61 67 65 5f 66 6c 75 73 68 5d 3d 31 35 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 68 62 5f 74 69 6d 65 73 74 61 6d 70 5d 3d 31 33 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 73 69 67 6e 61 6c 5f 66 6c 75 73 68 5f 74 69 6d 65 73 74 61 6d 70 5d 3d 31 33 26 73 65 73 73 69 6f 6e 5f 73 74 6f 72 61 67 65 5b 54 61 62 49 64 5d 3d 36 26 6c 6f 67 74 69 6d 65 3d 31 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 39 26 5f 5f 68 73 3d 31 39 38 33 39 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e Data Ascii: local_storage[Session]=20&local_storage[banzai%3Alast_storage_flush]=15&local_storage[hb_timestamp]=13&local_storage[signal_flush_timestamp]=13&session_storage[TabId]=6&logtime=1&__aaid=0&__user=0&__a=1&__req=9&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.
2024-04-26 04:11:47 UTC	1850	IN	HTTP/1.1 200 OK Set-Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; expires=Sat, 31-May-2025 04:11:47 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1714104706; path=/; domain=.facebook.com; httponly Content-Type: application/x-javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff
2024-04-26 04:11:47 UTC	1228	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-26 04:11:47 UTC	80	IN	Data Raw: 34 35 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6b 65 79 73 22 3a 5b 5d 7d 2c 22 6c 69 64 22 3a 22 37 33 36 32 30 32 33 36 35 39 37 35 38 31 30 39 38 34 35 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 45for (;;);{"__ar":1,"payload":{"keys":[]},"lid":"7362023659758109845"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49934	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:48 UTC	487	OUT	GET /ajax/webstorage/process_keys/?state=1 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKyl5.AWXXHAyz5Jo; datr=dCkrZmfEO7wCe7gasx04rfhT
2024-04-26 04:11:48 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0; expires=Thu, 25-Jul-2024 04:11:48 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:11:48 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:11:48 UTC	1452	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:11:48 UTC	2726	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 49 34 6d 6b 34 71 4a 36 49 45 6f 33 47 5a 76 6a 71 57 42 71 2d 58 52 30 59 39 59 74 51 64 5a 30 64 6f 45 4f 69 4c 4c 55 61 71 41 46 4a 63 35 47 36 75 6d 71 63 6d 63 61 4b 51 5a 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 41 52 6f 75 68 65 50 33 76 54 49 4c 46 41 4c 46 53 6a 6d 68 4b 39 30 53 6a 4b 54 52 33 66 36 41 6c 76 45 35 71 33 51 64 75 4d 65 67 76 51 4b 79 78 30 30 6b 79 38 50 4a 36 56 6c 2d 4d 57 57 45 56 4f 48 7a 56 6a 34 30 56 55 55 77 62 33 35 77 34 77 4d 54 58 66 46 69 49 33 42 79 52 37 6f 31 45 57 78 37 78 50 30 4c 55 71 70 36 5f 4f 41 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcI4mk4qJ6IEo3GZvjqWBq-XR0Y9YtQdZ0doEOiLLUaqAFJc5G6umqcmcaKQZw"; e_clientaddr="AcJARouheP3vTILFALFSjmhK90SjKTR3f6AlvE5q3QduMegvQKyx00ky8PJ6Vl-MWWEVOHzVj40VUUwb35w4wMTXfFiI3ByR7o1EWx7xP0LUqp6_OA"; e_fb_
2024-04-26 04:11:48 UTC	6	IN	Data Raw: 64 61 61 65 0d 0a Data Ascii: daae
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 6d 7a 56 33 51 62 50 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 Data Ascii: <!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="9mzV3QbP">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}wi
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 77 65 62 73 74 6f 72 61 67 65 2f 70 72 6f 63 65 73 73 5f 6b 65 79 73 2f 3f 73 74 61 74 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 76 69 65 77 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 65 65 20 70 6f 73 74 73 2c 20 70 68 6f 74 6f 73 20 61 6e 64 20 6d 6f 72 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: acebook.com/ajax/webstorage/process_keys/?state=1" /><meta name="robots" content="noodp,noydir" /><meta property="og:title" content="Log in or sign up to view" /><meta property="og:description" content="See posts, photos and more on Facebook." /><link rel
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 75 6c 6c 7d 2c 22 32 31 39 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 35 35 37 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a Data Ascii: ull},"2199":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"20948":{"result":true,"hash":null},"25572":{"result":false,"hash":null},"25571":{"result":false,"hash":
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 42 76 50 32 65 67 47 51 61 63 36 6f 55 54 52 74 31 2d 64 7a 54 50 22 7d 2c 31 34 31 5d 2c 5b 22 4b 53 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 6b 69 6c 6c 65 64 22 3a 7b 22 5f 5f 73 65 74 22 3a 5b 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 43 52 45 41 54 45 22 2c 22 50 4f 43 4b 45 54 5f 4d 4f 4e 53 54 45 52 53 5f 44 45 4c 45 54 45 22 2c 22 Data Ascii: :135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"BvP2egGQac6oUTRt1-dzTP"},141],["KSConfig",[],{"killed":{"__set":["POCKET_MONSTERS_CREATE","POCKET_MONSTERS_DELETE","
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 4e 75 6d 22 3a 33 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 79 41 62 6f 72 74 54 69 6d 65 22 3a 35 30 7d 2c 33 32 39 5d 2c 5b 22 43 53 53 4c 6f 61 64 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 6d 6f 64 75 6c 65 50 72 65 66 69 78 Data Ascii: rlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRetryAbortNum":3,"translationRetryAbortTime":50},329],["CSSLoaderConfig",[],{"timeout":5000,"modulePrefix
2024-04-26 04:11:48 UTC	1500	IN	Data Raw: 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 33 30 36 38 34 32 39 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 33 39 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f Data Ascii: "client_revision":1013068429,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19839.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49937	74.115.51.6	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:49 UTC	681	OUT	GET /signup?utm_source=internal&utm_medium=footer HTTP/1.1 Host: www.weebly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:49 UTC	1246	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:11:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: /app/front-door/signup CF-Ray: 87a3bb23bde667ea-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache, private Set-Cookie: language=en; expires=Fri, 10-May-2024 04:11:49 GMT; Max-Age=1209600; path=/ Vary: User-Agent X-Frame-Options: SAMEORIGIN X-Host: blu150.sf2p.intern.weebly.net X-UA-Compatible: IE=edge,chrome=1 X-W-DC: SFO Set-Cookie: _csrf=riwaSi8sHaexD4chGBfQp85GFAhF5Q-Zvlj47R6Vv8E; path=/; domain=www.weebly.com Set-Cookie: cookie-consent=%7B%22allowStrictlyNecessaryCookies%22%3Atrue%2C%22allowFunctionalityCookies%22%3Atrue%2C%22allowPerformanceCookies%22%3Atrue%2C%22allowTargetingCookies%22%3Atrue%2C%22allowInternalPerformanceCookies%22%3Atrue%7D; expires=Mon, 24-Apr-2034 04:11:49 GMT; Max-Age=315360000; path=/ Set-Cookie: sto-id-editor=GLAMBNAK; Domain=weebly.com; Path=/ Set-Cookie: __cf_bm=gW7u5TKAfNn7pLiCen75aUgJGlahXIh02XKI3mppONE-1714104709-1.0.1.1-dr0jwwKagxuKOpMKu.7kXrLRnfSpLRknAaA7tXXj5q3IjrFbMJ9IgfljC6DnjPCl_DyiDMtS4_jHtr1c_auxaA; path=/; expires=Fri, 26-Apr-24 04:41:49 GMT; domain=.weebly.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49936	74.115.51.6	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:49 UTC	1142	OUT	GET /app/front-door/signup HTTP/1.1 Host: www.weebly.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: language=en; _csrf=riwaSi8sHaexD4chGBfQp85GFAhF5Q-Zvlj47R6Vv8E; cookie-consent=%7B%22allowStrictlyNecessaryCookies%22%3Atrue%2C%22allowFunctionalityCookies%22%3Atrue%2C%22allowPerformanceCookies%22%3Atrue%2C%22allowTargetingCookies%22%3Atrue%2C%22allowInternalPerformanceCookies%22%3Atrue%7D; sto-id-editor=GLAMBNAK; __cf_bm=gW7u5TKAfNn7pLiCen75aUgJGlahXIh02XKI3mppONE-1714104709-1.0.1.1-dr0jwwKagxuKOpMKu.7kXrLRnfSpLRknAaA7tXXj5q3IjrFbMJ9IgfljC6DnjPCl_DyiDMtS4_jHtr1c_auxaA
2024-04-26 04:11:50 UTC	1369	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:11:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://squareup.com/logout?return_to=https://squareup.com/signup?v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%26app%3Dweebly%26return_to%3Dhttps%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup CF-Ray: 87a3bb257f8bb3e9-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6Ii9lVFVteWFFL2RkSFZaOGhYWVo1Q1E9PSIsInZhbHVlIjoiS2dyeHdlOGVBWGY0T3htY3JTWElvY21Ua3FUTlZjYVdWZlZLTmpSWjZLSzZnNUc3NmtsK3E2NVJzcEhCYnp1NkkyRVkyck5Jd0lhL3FHRFhBdjZ1d21sdGtKOGRuNzJFOEt4dEtJM1l2dkN3TEZVUVBCM0U2NWU3WVpOZE1UOXIiLCJtYWMiOiJiNGEwNjc0NTMwZWZjOTQ4YTc4ODU3NjYyZTk5NDFkNzFkNWNmOGZiNGRkNTgxNTdmMTgyMDdjYjcwM2EzMGMxIiwidGFnIjoiIn0%3D; expires=Fri, 26-Apr-2024 06:11:50 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: laravel_session=eyJpdiI6ImVnRHZJRnZIVWROUG03THlLdHVXY3c9PSIsInZhbHVlIjoieDIwUmVGMDZzTEt5Z2wyalU4K3JsY0RGY0N3eHdObi9kYkRENlEwSm44WndZemNyVzQyd0xBSWRHdWtoNmpZOFFrMHg2N1ZEd3p4aTNWQWI5L1ZUdkNZcGR2VG9lNGZPejM4TTRoUnJCVlhkR0FOdlVJUE40bk5pR3VLTjd0a1kiLCJtYWMiOiI1MTM5ZmYzYWZhYzY5MTNmYjg2MGM5YzUzYzAyM2FhNDVjNDUxMzhmMGUxOWY3ZTc2ZmQ0MDJjZjNiZGM1NTRlIiwidGFnIjoiIn0%3D; expires=Fri, 26-Apr-2024 06:11:50 GMT; Max-Age=7200; path=/; httponly; samesite=lax
2024-04-26 04:11:50 UTC	255	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 74 6f 2d 69 64 2d 77 65 62 2e 70 72 6f 64 2d 66 72 6f 6e 74 2d 64 6f 6f 72 2d 6b 38 73 3d 44 4f 47 49 42 4e 41 4b 3b 20 44 6f 6d 61 69 6e 3d 77 65 65 62 6c 79 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 0d 0a 58 2d 48 6f 73 74 3a 20 62 6c 75 35 38 2e 73 66 32 70 2e 69 6e 74 65 72 6e 2e 77 65 65 62 6c 79 2e 6e 65 74 0d 0a 58 2d 52 65 71 75 65 73 74 2d 49 44 3a 20 66 36 38 65 61 32 33 66 64 34 65 37 37 33 34 33 39 62 65 30 64 30 38 32 39 66 33 39 37 34 66 62 0d 0a 58 2d 52 65 76 69 73 69 6f 6e 3a 20 34 30 36 37 36 35 64 66 66 64 66 63 32 63 39 62 33 36 35 34 38 61 32 36 37 39 32 39 63 35 64 33 61 32 33 62 64 62 37 38 0d 0a 58 2d 57 2d 44 43 3a 20 53 46 4f 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Set-Cookie: sto-id-web.prod-front-door-k8s=DOGIBNAK; Domain=weebly.com; Path=/X-Host: blu58.sf2p.intern.weebly.netX-Request-ID: f68ea23fd4e773439be0d0829f3974fbX-Revision: 406765dffdfc2c9b36548a267929c5d3a23bdb78X-W-DC: SFOServer: cloudflare
2024-04-26 04:11:50 UTC	33	IN	Data Raw: 31 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 0d 0a Data Ascii: 1b<!DOCTYPE html><html>
2024-04-26 04:11:50 UTC	1122	IN	Data Raw: 34 35 62 0d 0a 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 6c 6f 67 6f 75 74 3f 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 76 25 33 44 77 65 65 62 6c 79 2d 73 73 6f 25 32 36 77 65 65 62 6c 79 5f 73 73 6f 5f 65 6e 61 62 6c 65 64 25 33 44 74 72 75 65 25 32 36 61 70 70 25 33 44 77 65 65 62 6c 79 25 32 36 72 65 74 75 72 6e 5f 74 6f 25 33 44 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 Data Ascii: 45b<head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://squareup.com/logout?return_to=https://squareup.com/signup?v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%26app%3Dweebly%26return_to%3Dhttps%3A%2F%2Fwww.wee
2024-04-26 04:11:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49938	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:50 UTC	838	OUT	GET /logout?return_to=https://squareup.com/signup?v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%26app%3Dweebly%26return_to%3Dhttps%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup HTTP/1.1 Host: squareup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:51 UTC	1351	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:11:50 GMT Content-Length: 0 Connection: close Location: https://squareup.com/signup?v=weebly-sso&weebly_sso_enabled=true&app=weebly&return_to=https://www.weebly.com/app/front-door/login/square?sso_intent=signup CF-Ray: 87a3bb2b3cac8dd0-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: _sqweb_session=;Version=1;Domain=squareup.com;Path=/;Max-Age=0;Expires=Thu, 1 Jan 1970 00:00:00 GMT;Category=C0001 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct content-security-policy: object-src 'none'; base-uri 'none'; script-src 'nonce-W/ZTr/009xxL1DS7IKK66A==' 'unsafe-inline' 'strict-dynamic' https: http: 'report-sample'; report-uri https://sentry.io/api/1474740/security/?sentry_key=f510e74496ac409fb59c50c52d7822da frame-options: SAMEORIGIN x-content-type-options: nosniff x-envoy-decorator-operation: /logout/** x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Set-Cookie: _sqweb_session=;Version=1;Path=/;Max-Age=0;Expires=Thu, 1 Jan 1970 00:00:00 GMT;Category=C0001 Set-Cookie: _js_csrf=;Version=1;Domain=squareup.com;Path=/;Max-Age=0;Expires=Thu, 1 Jan 1970 00:00:00 GMT;Category=C0001 Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0
2024-04-26 04:11:51 UTC	519	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 71 75 61 72 65 47 65 6f 3d 55 53 2d 46 4c 3b 20 44 6f 6d 61 69 6e 3d 73 71 75 61 72 65 75 70 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 20 53 65 63 75 72 65 3b 20 6d 61 78 2d 61 67 65 3d 32 34 31 39 32 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 73 61 76 74 3d 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 73 71 75 61 72 65 75 70 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 5f 56 43 32 37 39 63 4a 36 Data Ascii: Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200Set-Cookie: _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; Max-Age=31536000; Domain=squareup.com; Path=/; Secure; SameSite=NoneSet-Cookie: __cf_bm=_VC279cJ6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49939	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:51 UTC	996	OUT	GET /signup?v=weebly-sso&weebly_sso_enabled=true&app=weebly&return_to=https://www.weebly.com/app/front-door/login/square?sso_intent=signup HTTP/1.1 Host: squareup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:51 UTC	652	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:11:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 412 Connection: close Location: /signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true CF-Ray: 87a3bb2faeb97428-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Content-Language: en Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct
2024-04-26 04:11:51 UTC	15177	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 6c 63 68 65 6d 79 2e 76 65 72 69 66 66 2e 63 6f 6d 20 2a 2e 76 65 72 69 66 66 2e 6d 65 20 61 70 69 2e 6e 65 75 72 6f 2d 69 64 2e 63 6f 6d 20 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 20 64 31 67 31 34 35 78 37 30 73 72 6e 37 68 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 67 6f 6f 67 6c 65 2e 63 6f 6d 20 67 73 74 61 74 69 63 2e 63 6f 6d 20 6c 6f 67 73 2e 6e 65 75 72 6f 2d 69 64 2e 63 6f 6d 20 6d 75 6e 63 68 6b 69 6e 2e 6d 61 72 6b 65 74 6f 2e 6e 65 74 20 72 75 6d 2e 62 72 6f 77 73 65 72 2d 69 6e 74 61 6b 65 2d 64 61 74 61 64 6f 67 68 71 2e 63 6f 6d 20 73 65 73 73 69 6f 6e 2d 72 65 70 6c 61 79 2e 62 72 6f 77 73 Data Ascii: content-security-policy: default-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net rum.browser-intake-datadoghq.com session-replay.brows
2024-04-26 04:11:51 UTC	412	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 61 6d 70 3b 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 61 6d 70 3b 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 73 6f 5f 69 6e 74 65 6e 74 25 33 44 73 69 67 6e 75 70 26 61 6d 70 3b 76 3d 77 65 65 62 6c 79 2d 73 73 6f 26 61 6d 70 3b 77 65 65 62 6c 79 5f 73 73 6f 5f 65 6e 61 62 6c 65 64 3d 74 72 75 65 22 3e 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 61 6d 70 3b 63 6f 75 6e 74 72 79 5f 63 6f 64 65 Data Ascii: <p>Found. Redirecting to <a href="/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true">/signup?app=weebly&country_code

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49940	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:52 UTC	1030	OUT	GET /signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true HTTP/1.1 Host: squareup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:53 UTC	512	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb355f25da73-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Content-Language: en ETag: W/"9895-EBikENvJ/aR0qf4DKIdcxhMJqDU" Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct
2024-04-26 04:11:53 UTC	15177	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 6c 63 68 65 6d 79 2e 76 65 72 69 66 66 2e 63 6f 6d 20 2a 2e 76 65 72 69 66 66 2e 6d 65 20 61 70 69 2e 6e 65 75 72 6f 2d 69 64 2e 63 6f 6d 20 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 20 64 31 67 31 34 35 78 37 30 73 72 6e 37 68 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 67 6f 6f 67 6c 65 2e 63 6f 6d 20 67 73 74 61 74 69 63 2e 63 6f 6d 20 6c 6f 67 73 2e 6e 65 75 72 6f 2d 69 64 2e 63 6f 6d 20 6d 75 6e 63 68 6b 69 6e 2e 6d 61 72 6b 65 74 6f 2e 6e 65 74 20 72 75 6d 2e 62 72 6f 77 73 65 72 2d 69 6e 74 61 6b 65 2d 64 61 74 61 64 6f 67 68 71 2e 63 6f 6d 20 73 65 73 73 69 6f 6e 2d 72 65 70 6c 61 79 2e 62 72 6f 77 73 Data Ascii: content-security-policy: default-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net rum.browser-intake-datadoghq.com session-replay.brows
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 37 66 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 65 6e 2d 75 73 20 63 6f 75 6e 74 72 79 2d 75 73 20 6c 6f 63 61 6c 65 2d 65 6e 2d 75 73 20 6f 6e 62 6f 61 72 64 69 6e 67 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 Data Ascii: 7feb<!DOCTYPE html><html lang="en-us" class="no-js en-us country-us locale-en-us onboarding"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, use
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 3b 75 73 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 76 69 26 71 75 6f 74 3b 5d 2c 26 71 75 6f 74 3b 61 76 61 69 6c 61 62 6c 65 5f 6c 61 6e 67 75 61 67 65 73 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 65 6e 2d 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 65 73 2d 55 53 26 71 75 6f 74 3b 5d 2c 26 71 75 6f 74 3b 66 65 61 74 75 72 65 73 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 6d 70 61 72 65 5f 70 6c 61 6e 73 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 63 6c 61 73 73 5f 62 6f 6f 6b 69 6e 67 73 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 77 61 69 74 6c 69 73 74 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 73 68 6f 77 5f 64 69 72 65 63 74 5f 64 65 62 69 74 5f 6d 61 6e 64 61 74 65 5f 73 74 65 70 26 71 75 Data Ascii: ;us","vi"],"available_languages":["en-US","es-US"],"features":{"compare_plans":true,"enable_class_bookings":false,"waitlist":false,"show_direct_debit_mandate_step&qu
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 5f 69 64 65 6e 74 69 74 79 5f 76 65 72 69 66 69 65 72 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 72 65 74 61 69 6c 5f 69 6e 74 65 6e 74 5f 66 6f 72 5f 63 6f 75 6e 74 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 72 65 74 61 69 6c 5f 76 61 72 69 61 6e 74 5f 66 6f 72 5f 63 6f 75 6e 74 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 72 73 74 5f 6e 65 77 5f 73 61 6c 65 73 5f 71 75 61 6c 69 66 69 63 61 74 69 6f 6e 5f 66 6c 6f 77 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 72 73 74 5f 73 61 6c 65 73 5f 6f 70 74 5f 69 6e 5f 62 6f 6f 6b 69 6e 67 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 72 74 6c 5f 6d Data Ascii: _identity_verifier":true,"enable_retail_intent_for_country":true,"enable_retail_variant_for_country":true,"enable_rst_new_sales_qualification_flow":true,"enable_rst_sales_opt_in_booking":true,"enable_rtl_m
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 69 78 5f 70 61 79 6d 65 6e 74 5f 61 63 74 69 76 61 74 69 6f 6e 5f 70 61 67 65 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 75 73 65 5f 6e 65 77 5f 6f 6e 62 6f 61 72 64 69 6e 67 5f 73 65 72 76 69 63 65 5f 63 61 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 75 73 65 5f 6e 65 77 5f 6f 6e 62 6f 61 72 64 69 6e 67 5f 73 65 72 76 69 63 65 5f 75 73 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 75 73 65 5f 6e 65 77 5f 6f 6e 62 6f 61 72 64 69 6e 67 5f 73 65 72 76 69 63 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 76 65 72 69 66 69 63 61 74 69 6f 6e 5f 6d 65 74 68 6f 64 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 75 73 5f 6b 79 62 5f 73 68 6f 77 5f 6f 70 74 69 6d 69 Data Ascii: ix_payment_activation_page_enabled":true,"use_new_onboarding_service_ca":false,"use_new_onboarding_service_us":true,"use_new_onboarding_service":true,"verification_method_enabled":false,"us_kyb_show_optimi
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 69 66 74 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 73 6b 69 70 5f 72 65 73 75 6d 65 5f 69 66 5f 63 6f 6d 69 6e 67 5f 66 72 6f 6d 5f 6e 65 78 74 6a 73 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 74 77 6f 5f 66 61 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 75 6e 6c 6f 63 6b 5f 63 61 6c 69 66 6f 72 6e 69 61 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 75 73 65 5f 6e 65 77 5f 64 6f 77 6e 6c 6f 61 64 5f 74 65 78 74 5f 65 6e 64 70 6f 69 6e 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 65 6e 61 62 6c 65 5f 6f 6e 62 6f 61 72 64 69 6e 67 5f 77 65 62 76 69 65 77 5f 73 75 70 70 6f 72 74 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6d 69 67 72 61 74 69 Data Ascii: ift_enabled":false,"skip_resume_if_coming_from_nextjs":true,"two_fa_enabled":true,"unlock_california":true,"use_new_download_text_endpoint":true,"enable_onboarding_webview_support":false,"migrati
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 2c 26 71 75 6f 74 3b 69 6e 76 6f 69 63 65 73 5f 75 73 65 5f 69 6e 74 72 6f 5f 69 6e 74 65 72 73 74 69 74 69 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6a 70 5f 72 31 32 5f 68 61 72 64 77 61 72 65 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6c 61 75 6e 63 68 5f 72 34 31 5f 69 6e 5f 77 65 62 5f 6f 6e 62 6f 61 72 64 69 6e 67 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 61 72 6b 65 74 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6d 61 72 6b 65 74 6f 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6e 65 77 5f 64 65 66 61 75 6c 74 5f 66 6c 6f 77 5f 65 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6e 65 77 5f Data Ascii: ,"invoices_use_intro_interstitial":true,"jp_r12_hardware_enabled":true,"launch_r41_in_web_onboarding":true,"market_enabled":false,"marketo_enabled":true,"new_default_flow_enabled":true,"new_
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 75 6f 74 3b 3a 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 49 4e 43 4c 55 53 49 56 45 26 71 75 6f 74 3b 7d 2c 26 71 75 6f 74 3b 41 46 54 45 52 50 41 59 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 64 69 73 63 6f 75 6e 74 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 36 30 30 2c 26 71 75 6f 74 3b 69 6e 74 65 72 63 68 61 6e 67 65 5f 63 65 6e 74 73 26 71 75 6f 74 3b 3a 33 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 49 4e 43 4c 55 53 49 56 45 26 71 75 6f 74 3b 7d 7d 2c 26 71 75 6f 74 3b 51 52 5f 43 4f 44 45 26 71 75 6f 74 3b 3a Data Ascii: uot;:0,"tax_rate_type":"INCLUSIVE"},"AFTERPAY":{"discount_basis_points":600,"interchange_cents":30,"tax_rate_basis_points":0,"tax_rate_type":"INCLUSIVE"}},"QR_CODE":
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 3b 3a 7b 26 71 75 6f 74 3b 64 69 73 63 6f 75 6e 74 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 33 35 30 2c 26 71 75 6f 74 3b 69 6e 74 65 72 63 68 61 6e 67 65 5f 63 65 6e 74 73 26 71 75 6f 74 3b 3a 31 35 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 49 4e 43 4c 55 53 49 56 45 26 71 75 6f 74 3b 7d 7d 2c 26 71 75 6f 74 3b 45 4d 56 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 41 4c 4c 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 64 69 73 63 6f 75 6e 74 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 32 36 30 2c 26 71 75 6f 74 3b 69 6e 74 65 72 63 68 61 6e 67 65 5f 63 65 6e 74 73 Data Ascii: ;:{"discount_basis_points":350,"interchange_cents":15,"tax_rate_basis_points":0,"tax_rate_type":"INCLUSIVE"}},"EMV":{"ALL":{"discount_basis_points":260,"interchange_cents
2024-04-26 04:11:53 UTC	1369	IN	Data Raw: 3a 7b 26 71 75 6f 74 3b 64 69 73 63 6f 75 6e 74 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 32 36 30 2c 26 71 75 6f 74 3b 69 6e 74 65 72 63 68 61 6e 67 65 5f 63 65 6e 74 73 26 71 75 6f 74 3b 3a 31 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 30 2c 26 71 75 6f 74 3b 74 61 78 5f 72 61 74 65 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 49 4e 43 4c 55 53 49 56 45 26 71 75 6f 74 3b 7d 2c 26 71 75 6f 74 3b 50 41 59 5f 57 49 54 48 5f 43 41 53 48 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 64 69 73 63 6f 75 6e 74 5f 62 61 73 69 73 5f 70 6f 69 6e 74 73 26 71 75 6f 74 3b 3a 32 36 30 2c 26 71 75 6f 74 3b 69 6e 74 65 72 63 68 61 6e 67 65 5f 63 65 6e 74 73 26 71 75 6f 74 3b 3a 31 30 Data Ascii: :{"discount_basis_points":260,"interchange_cents":10,"tax_rate_basis_points":0,"tax_rate_type":"INCLUSIVE"},"PAY_WITH_CASH":{"discount_basis_points":260,"interchange_cents":10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49942	151.101.1.49	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	568	OUT	GET /square-sans.min.css HTTP/1.1 Host: square-fonts-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	718	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11447 x-amz-id-2: AWUeRHZhEtZ9W99Yj0pgMfkSxF469MQmzR4GHu86Z6zb3CEtV/Usd0AmcrLIdL6f4S+Z8Tg3KCo= x-amz-request-id: 258RJG9TWEFQR1NB Last-Modified: Tue, 17 Oct 2023 21:24:04 GMT ETag: "01b3538e1c78fafece17084027e2eb3e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, stale-while-revalidate x-amz-version-id: 15Aw0CJwsJNAXVAF2Kw3WgOzDBrzs1B5 Content-Type: text/css Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Age: 0 Date: Fri, 26 Apr 2024 04:11:53 GMT Via: 1.1 varnish X-Served-By: cache-gnv1820027-GNV X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714104714.786982,VS0,VE182 Vary: Accept-Encoding
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 73 71 75 61 72 65 2d 73 61 6e 73 2d 74 65 78 74 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 20 56 46 22 2c 22 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 73 71 75 61 72 65 2d 73 61 6e 73 2d 64 69 73 70 6c 61 79 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 44 69 73 70 6c 61 79 20 56 46 22 2c 22 53 71 75 61 72 65 20 53 61 6e 73 20 44 69 73 70 6c 61 79 22 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 73 71 75 61 72 65 2d 73 61 6e 73 2d 6d 6f 6e 6f 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 4d 6f 6e 6f 20 56 46 22 2c 22 53 71 75 61 72 65 20 53 61 6e 73 20 4d 6f 6e 6f 22 2c 75 69 2d 6d 6f 6e Data Ascii: :root{--square-sans-text:"Square Sans Text VF","Square Sans Text",helvetica,arial,sans-serif;--square-sans-display:"Square Sans Display VF","Square Sans Display",helvetica,arial,sans-serif;--square-sans-mono:"Square Sans Mono VF","Square Sans Mono",ui-mon
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 71 75 61 72 65 53 61 6e 73 54 65 78 74 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 74 65 78 74 2f 53 71 75 61 72 65 53 61 6e 73 54 65 78 74 2d 4d 65 64 69 75 6d 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 22 3b 73 72 63 3a 75 72 Data Ascii: quareSansText-Medium.woff") format("woff"),url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Medium.ttf") format("truetype");font-weight:500;font-style:normal;font-display:swap}@font-face{font-family:"Square Sans Text";src:ur
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 74 65 78 74 2f 53 71 75 61 72 65 53 61 6e 73 54 65 78 74 2d 53 65 6d 69 42 6f 6c 64 49 74 61 6c 69 63 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 Data Ascii: https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-SemiBoldItalic.ttf") format("truetype");font-weight:600;font-style:italic;font-display:swap}@font-face{font-family:"Square Sans Text";src:url("https://square-fonts-production-f.squ
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 67 68 74 3a 34 30 30 20 37 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 7d 40 73 75 70 70 6f 72 74 73 20 28 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 29 7b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 54 65 78 74 20 56 46 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 74 65 78 74 2f 53 71 75 61 72 65 53 61 6e 73 54 65 78 74 2d 49 74 61 6c 69 63 2d 56 46 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 20 73 75 Data Ascii: ght:400 700;font-style:normal;font-display:swap}}@supports (font-variation-settings:normal){@font-face{font-family:"Square Sans Text VF";src:url("https://square-fonts-production-f.squarecdn.com/square-text/SquareSansText-Italic-VF.woff2") format("woff2 su
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 6d 6f 6e 6f 2f 53 71 75 61 72 65 53 61 6e 73 4d 6f 6e 6f 2d 53 65 6d 69 42 6f 6c 64 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 6d 6f 6e 6f 2f 53 71 75 61 72 65 53 61 6e 73 4d 6f 6e 6f 2d 53 65 6d 69 42 6f 6c 64 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 Data Ascii: /square-fonts-production-f.squarecdn.com/square-mono/SquareSansMono-SemiBold.woff2") format("woff2"),url("https://square-fonts-production-f.squarecdn.com/square-mono/SquareSansMono-SemiBold.woff") format("woff"),url("https://square-fonts-production-f.squa
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 52 65 67 75 6c 61 72 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 Data Ascii: uare-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-Regular.woff") format("woff"),url("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-Regular.ttf") format("truetype");font-weight:400;font-style:normal;f
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d Data Ascii: play/SquareSansDisplay-Medium.woff2") format("woff2"),url("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-Medium.woff") format("woff"),url("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-
2024-04-26 04:11:54 UTC	1378	IN	Data Raw: 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 42 6f 6c 64 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 42 6f 6c 64 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f Data Ascii: l("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-Bold.woff2") format("woff2"),url("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-Bold.woff") format("woff"),url("https://square-fonts-pro
2024-04-26 04:11:54 UTC	423	IN	Data Raw: 73 20 28 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 29 7b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 71 75 61 72 65 20 53 61 6e 73 20 44 69 73 70 6c 61 79 20 56 46 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 2f 73 71 75 61 72 65 2d 64 69 73 70 6c 61 79 2f 53 71 75 61 72 65 53 61 6e 73 44 69 73 70 6c 61 79 2d 56 46 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 20 73 75 70 70 6f 72 74 73 20 76 61 72 69 61 74 69 6f 6e 73 22 29 2c 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 2d 66 6f 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f Data Ascii: s (font-variation-settings:normal){@font-face{font-family:"Square Sans Display VF";src:url("https://square-fonts-production-f.squarecdn.com/square-display/SquareSansDisplay-VF.woff2") format("woff2 supports variations"),url("https://square-fonts-productio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49949	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	584	OUT	GET /builds/149f9b9/assets/vendor.css HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	681	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 63035 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:33:04 GMT ETag: "552470732c7f4f5c7265f41521e99dca" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: WdQn.6BFkojZgin6lFWz.3lrJiokYjh_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ee5a1fbfd85d9d25aef83ca16d91afca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 6RQ-5ZQI0LHA46IIBHkBOpWtm2MtePVjNd3lceY2ca-XWdgcAogHBA== Vary: Origin
2024-04-26 04:11:54 UTC	15345	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 6f 23 49 72 2f fa 55 06 58 1c cc 8c d1 9a 4b 91 92 46 ad 85 01 1b 38 30 fc bf 0f 8c 7b 61 f8 8f 92 58 94 0a cd d7 16 a9 7e 78 b1 df fd 14 8b 2c 56 3e e2 1d 49 b6 80 8b c6 ee 74 33 23 7e 11 19 11 19 f9 ac cc a7 76 b3 d9 ff fd e6 e6 65 d3 d6 37 d5 ba 59 55 fb 66 b3 be a9 d7 fb ba bd d9 b7 d5 7a d7 1c 7f a8 76 cd fa f5 e9 e5 fd b9 79 b9 79 ae ff a7 a9 db df fe 98 3e 7c fa e3 f6 d3 1f 77 8f 9f 6e 7f ff 2b 8f b1 a8 76 fb 9b dd b6 ae e7 37 f3 f7 b6 27 7a fa e3 76 27 e0 5c 6d e6 75 c7 50 67 dc d3 3b 09 fb 6e b9 f9 96 b1 82 9c df 9b 3d 5b eb fb e9 a7 c9 a7 3f fe bc fb 34 81 2a 9d 20 c8 eb 9c 30 a2 55 be 7d 10 70 83 35 9e 01 8c ab cd d7 9a ad f1 9f 0f 87 1a 4f ef 40 37 a7 08 e2 1a a7 8c 3a 27 a7 dc 8c 8f 9f ab 5d 07 dc fc 4f Data Ascii: {o#Ir/UXKF80{aX~x,V>It3#~ve7YUfzvyy>\|wn+v7'zv'\muPg;n=[?4* 0U}p5O@7:']O
2024-04-26 04:11:54 UTC	1375	IN	Data Raw: 8d 89 25 7d df 96 33 79 fb b6 a9 b1 6f 9b e9 fa b6 d9 cf ea db 66 ea be 6d 96 f7 6d 33 6a 60 35 73 f4 6d 33 ac 6f 23 82 6d 96 f4 6d 64 cb 98 a9 fa b6 19 d1 b7 09 a5 78 fa b6 99 b6 6f 9b fd 8c be 6d a6 ee db 66 ae be 6d 66 ec db 66 ba be 6d 86 f5 6d b7 4c f0 ab 3a b7 59 c1 ce 6d 66 ea dc 72 ae 2b 06 8e a5 73 cb d9 2c 21 64 ef dc 00 66 49 30 e9 3b b7 9c c9 db b9 cd 8c 9d db b9 67 0b 57 94 49 4a 70 ad 95 e4 e0 2f b9 38 be ca a8 93 9b bf ce 88 f0 e7 77 4d 04 56 4e df e9 9b 1e df e9 83 a1 e0 47 2b 39 5a b9 c1 f4 0f 59 6a 65 4b 8d 36 c6 12 5f d3 91 56 5e d3 91 27 ad 69 7a e0 2b b9 80 42 8e 1b 1f a5 d9 1c fc bb ff f1 f4 c7 4c c0 1b ee e5 9e 19 1f 04 8c 99 b9 c1 da 58 cc 14 ed e1 0d 3a e1 7b 0c 23 63 bc a3 12 d5 a6 d3 a0 83 9c 77 39 7d f3 7a 53 ad 9b 55 95 dc 38 Data Ascii: %}3yofmm3j`5sm3o#mmdxomfmffmmL:Ymfr+s,!dfI0;gWIJp/8wMVNG+9ZYjeK6_V^'iz+BLX:{#cw9}zSU8
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 8a 14 40 30 c5 7a c2 b1 0d 52 e9 30 d9 ba 93 c3 47 91 02 08 26 aa e7 b7 aa 5d f7 fd ac a0 1d 10 b4 16 7c ca 1a 87 4e 83 68 06 0a 4d 20 58 b1 b6 70 2b 00 a9 74 98 5c dd c9 46 20 92 0f 43 8a b5 84 db 00 48 a5 c3 e4 6a 4e 36 01 91 7c 18 12 d2 f2 6f ed cb e1 df ab cd 7a f3 f2 d6 6e 56 35 d7 0c 44 0c 66 49 60 e7 17 7e 37 62 12 3f ec 31 e3 cc 8b ce 52 aa ca 06 0c ba ca 06 8c d9 e4 45 a1 25 ff 85 0d 0e 93 35 69 86 54 57 41 78 52 c9 55 8d 1f 87 85 95 92 8d 9e 59 62 a2 62 ca 11 b4 4a 47 26 3c 13 46 3a 34 71 62 79 e5 c4 21 29 17 26 b5 0a 16 8a d2 29 01 41 9e 55 65 32 79 a8 88 da 20 0b 1b 23 d7 7b 47 75 78 5c fd f8 0c fd f1 e1 ef af d5 79 79 2a 9e 52 b3 d4 61 9d 19 5a b0 e2 0c 8f f4 4b 3e 0e e7 52 77 09 b0 75 3e 2d 0a dc 1f f7 e5 b4 26 02 e2 8f 41 48 17 18 0e 39 ea Data Ascii: @0zR0G&]\|NhM Xp+t\F CHjN6\|oznV5DfI`~7b?1RE%5iTWAxRUYbbJG&<F:4qby!)&)AUe2y #{Gux\yy*RaZK>Rwu>-&AH9
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 5c 55 fe 43 ef 85 45 28 28 6b 0c 35 b1 5e 38 09 a8 71 03 7f e1 01 b2 63 35 bf 08 80 f2 74 a2 ac 92 9b f5 c6 fa 17 1e 18 f0 96 04 40 58 65 69 a9 2a b1 e7 54 fd 5b 0f a4 35 d9 78 1f 6f b6 87 b4 9d 71 17 b9 33 72 db ce 98 4e a2 76 46 6e db 19 9e c6 ce 35 a4 2f 18 51 6b 98 bb d7 d0 d3 c5 b9 64 9e 3e 51 8b 23 6a c8 05 8f ad 6c 39 0d 2e e3 24 d4 60 9a b4 ce dd c0 96 75 a6 96 79 cf 3a a3 be 7f 14 07 40 28 38 77 0f ec 56 df ee 41 40 7a 73 00 04 e3 4a 0e 80 20 dd 76 93 69 3b c3 35 ae f5 2e c8 fd 77 01 ea 1b 3e f1 a8 b1 73 cd 26 21 ae 8d 80 c4 9e 78 d4 25 fa c4 a3 3e 49 8b 11 be d2 45 cb 79 68 d5 66 a1 06 f3 5e 07 de ca d8 f3 b8 03 6f 65 ec 6f 2d c5 a1 c1 dd db 26 f6 a8 7b 2e 8a e8 a3 ee bb 39 d2 8e 7a ea 7d 12 dc 33 f3 24 29 50 82 b5 ed 08 ff 55 df 75 8d 3f f7 73 Data Ascii: \UCE((k5^8qc5t@Xei*T[5xoq3rNvFn5/Qkd>Q#jl9.$`uy:@(8wVA@zsJ vi;5.w>s&!x%>IEyhf^oeo-&{.9z}3$)PUu?s
2024-04-26 04:11:54 UTC	1024	IN	Data Raw: 81 2f 2e 5a 89 bf b6 da 9f 77 b8 81 ad 54 f3 4c f9 b6 a4 54 cb 5b 4f 2d 05 28 4a 5e 1d fc c5 9b 71 39 41 1d 09 5a e7 89 a7 7e fd 3e 91 7f e7 e4 8c cc e5 a7 05 f9 74 37 87 a2 67 8a 5b 74 97 70 66 57 b2 08 4b e3 fd 5f b5 c0 e8 ab 2c f2 80 38 36 45 7d 3e 51 69 ca 9e 89 49 4d 6f c7 d5 19 35 8b 1d cd 6f 37 e1 39 5f b4 5f f4 3b 13 6f 03 b8 40 b9 d1 60 53 6e 8b f3 ee 84 f3 19 01 ff 30 a6 ce 33 73 0b 94 73 5b 92 26 e1 ec c4 d6 48 98 b1 0c 50 3c 4b 9a dc 95 41 f1 59 38 95 19 90 06 41 e0 fc e6 b6 34 93 49 d1 03 64 1e bb a8 3c fe 68 59 c0 00 35 5c f5 1a d4 0e b3 b1 83 78 11 fc 06 25 60 0e 3f e1 da 09 cb 47 b1 3b 95 6b 28 6d c0 31 21 4a 9e c0 56 71 bf f7 ab ba 19 b1 e3 dd d2 25 4c 75 9e 60 33 cb 94 04 96 c8 71 9a 6f 8c 97 b2 a9 ff a6 36 d6 7c 4a b5 3d c6 63 e7 78 e6 Data Ascii: /.ZwTLT[O-(J^q9AZ~>t7g[tpfWK_,86E}>QiIMo5o79__;o@`Sn03ss[&HP<KAY8A4Id<hY5\x%`?G;k(m1!JVq%Lu`3qo6\|J=cx
2024-04-26 04:11:54 UTC	2800	IN	Data Raw: 32 ed b3 11 46 6e 71 bf 34 61 88 bb c4 73 e9 d8 47 eb 2e 21 a9 71 cd 55 61 ce 1a 84 19 07 f5 5f e2 ef 73 fb f5 ed 62 d9 3c 29 27 8e 41 52 73 d6 58 7f 85 68 9a 76 20 dc c3 c1 d2 d5 39 d2 82 2f 62 d6 f9 24 a2 0e 3c a8 48 3c 4f d1 40 a1 98 40 49 56 19 e2 27 3d 60 8e 07 8d 43 3e d1 8f 83 7c 4b c4 73 f8 5e e4 80 8c 08 b0 33 c2 de f5 3e f2 30 89 1e df 95 59 d3 17 20 36 25 3a 43 1c cb 0e 77 d8 27 d2 eb 90 e9 30 81 8b a0 93 c8 87 a7 6d 3f 5e b3 20 19 8e 34 24 97 a7 41 6f 90 63 13 70 e4 1e 3c 6f 86 64 c4 9e 91 df 71 5b 19 a4 a1 4f 98 02 2b 98 6c 4e 80 53 e6 b5 dc 11 ed 4c 2f 1c c7 9c 8f 35 15 44 2a b1 10 5c a2 99 3d ac d5 72 85 b9 10 36 8c d2 40 cf 1b 3c c5 b5 b7 04 4e 3c bf 2a 67 28 b4 49 26 74 77 a5 9d a7 9e c2 c2 02 96 55 ed f4 a5 2a f7 bf 30 a9 97 70 94 b9 47 Data Ascii: 2Fnq4asG.!qUa_sb<)'ARsXhv 9/b$<H<O@@IV'=`C>\|Ks^3>0Y 6%:Cw'0m?^ 4$Aocp<odq[O+lNSL/5D\=r6@<N<g(I&twU*0pG
2024-04-26 04:11:54 UTC	9723	IN	Data Raw: 31 bd 13 dd 4e 66 61 ac 95 71 f1 c7 f6 bc 27 33 f8 16 be 37 af 81 8e bf f2 24 a0 57 4d d6 0b ab 33 8a 33 f7 fc db 20 08 e9 78 b8 bd 11 a5 1b 84 bf 6d 59 7a bc 3b 87 70 22 b2 57 5f 08 f6 cf 2f dc 6c a2 d7 d1 04 34 78 13 11 14 70 37 a5 ff f8 61 0b 25 87 67 2b 8d ca ef af 6e 30 b1 9b ee c3 9b 69 5b 11 ea b7 e4 e6 21 67 d9 a5 0e a0 42 48 3e 50 34 1f 95 ea f3 f3 9e 5e c3 3b 9e 16 85 9e 76 d0 e9 64 aa 89 e9 d8 d1 22 a3 d9 61 cc 5c 11 23 3b 38 fd 61 d9 9d bb 24 26 2f d9 0f c3 68 c2 52 fa b8 b2 80 48 c2 fe 8c 1d ab 50 39 10 57 47 7b fb c8 84 30 2c a7 4c 4f 9c 7e 3e a6 62 f5 73 9c 04 9a 27 55 93 cd 63 4a 97 2a cd a3 ab 97 da 0b 4b f6 a7 17 39 26 a7 9f 90 2b cf c7 74 02 1a 20 dc c2 aa be d8 b9 77 b1 33 c7 49 38 5a 73 8b 78 d2 d9 80 20 2d 2c 34 ee 76 1d 27 b9 d1 c0 Data Ascii: 1Nfaq'37$WM33 xmYz;p"W_/l4xp7a%g+n0i[!gBH>P4^;vd"a\#;8a$&/hRHP9WG{0,LO~>bs'UcJ*K9&+t w3I8Zsx -,4v'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49946	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	601	OUT	GET /builds/149f9b9/assets/public-web-styles-proxy.css HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	681	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 37777 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:33:02 GMT ETag: "c6eac4f56e78ed961279311859214d13" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: Q6xqY7oL4fUiYFGax5XuKCcdVNHqGYaa Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7ca860d38523be6631b48c221eed2906.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: Fd4EopIxrjIcxw2A13tarp3PBjq5zkmDjDDvo_hSMhsbIfmLEdcSkg== Vary: Origin
2024-04-26 04:11:54 UTC	15703	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 5b 8f 24 c9 75 30 f6 57 ea 1b 82 fe 66 c8 aa 56 55 df a6 a7 1b a4 45 2e 29 72 25 0e 49 89 94 29 92 58 1b 59 55 59 dd b9 53 55 59 ac ca 9a e9 99 76 03 c2 ee ab 2d 03 7c f1 8b 0d 58 86 00 41 34 74 01 24 40 0f e6 d3 f7 53 3c 2f 7a e3 5f 70 64 46 5e e2 72 6e 11 59 3d 43 50 ad 15 77 bb 32 ce 39 71 e2 c4 b9 65 9e 38 99 c9 66 b3 4c 8b e1 3c 7b 3d bc 29 56 cb 61 b6 d8 26 ab 74 98 4f 3f 4f 67 c5 70 b7 49 d6 77 8b 7c 5d 8c 76 d9 bb f4 72 32 1e 7f f5 ea 75 ba 2d b2 59 b2 1c 25 cb ec 7a 7d 39 4d 76 e9 32 5b a7 f7 47 37 93 e1 d1 cd b1 fa df 89 fa df a9 fa df 99 fa df f9 70 ba cc 67 af 7e b5 cf 8b 74 38 cd e7 6f 87 0a 4c 41 29 20 05 a3 40 6e ce ef 36 c9 7c 9e ad af 2f c7 57 d3 7c 3b 4f b7 ea 8f 72 ce cb 6c 7d 93 6e b3 02 9d 31 5f 0e Data Ascii: [$u0WfVUE.)r%I)XYUYSUYv-\|XA4t$@S</z_pdF^rnY=CPw29qe8fL<{=)Va&tO?OgpIw\|]vr2u-Y%z}9Mv2[G7pg~t8oLA) @n6\|/W\|;Orl}n1_
2024-04-26 04:11:54 UTC	287	IN	Data Raw: 71 43 3e e9 2a c9 96 9f 99 12 5b ef 57 d3 74 6b 5d da 24 bb dd 9b 7c 3b b7 2e ee d2 64 3b bb b1 2e 15 e9 d2 f9 7d 5b 58 17 f6 db e5 67 77 86 a0 6a a1 9c 2a a1 7c 5c a6 86 e5 d5 64 9b 26 77 6a 5f a6 af b2 62 94 6c 36 8a 56 b2 9e a5 97 eb 7c 9d 5e 8d 56 f9 3b ef a2 fb 7b 93 d7 fb b4 4d 97 49 a9 5a 57 ef ca b7 35 a5 b7 97 e3 2b 5b 5b 56 c9 f6 3a 5b ab cb 9b 64 3e cf d6 d7 4a 1e 8d 62 68 c5 39 75 14 67 72 d1 8c 2f 92 55 b6 7c 7b f9 e4 27 bf da 2b 8e 07 2f 93 ed ab b4 78 32 fc 7e ba 7c 9d 16 d9 2c 19 7e 6b 9b 25 cb e1 93 ef 67 db 44 cd 91 0f fe 2c 79 b5 1f 7c 2f 2f 6e b2 d9 e0 c7 db fc c9 f0 c9 fb 2f 7f fd fe cb 7f 78 ff c5 3f bd ff f2 6f fe e3 ef 7f fd fe 8b 7f 2b 07 06 3f 3b a9 c6 fe f6 fd 17 7f f7 fe cb df bc ff e2 37 4f 86 2f d3 6c fb 36 1f 3e f9 dd 6f ff Data Ascii: qC>[Wtk]$\|;.d;.}[Xgwj\|\d&wj_bl6V\|^V;{MIZW5+[[V:[d>Jbh9ugr/U\|{'+/x2~\|,~k%gD,y\|//n/x?o+?;7O/l6>o
2024-04-26 04:11:54 UTC	1322	IN	Data Raw: 16 96 56 2b 0d 35 62 a0 8e 89 96 96 5f e5 fb a2 5c 9e 96 db 54 ed 63 ba bd 2c 4d 6c 97 2b cd 1d 7c 65 76 5a fe 53 0f 8c b6 c9 3c db ef 2e 4f 20 35 f1 7d 5f ad 2c fe 40 ab 32 80 bf d4 8a e3 0f 94 ea 03 5d bd 2d 80 cb a5 2a d5 57 77 e9 32 9d 35 8e b9 d1 2e fd f3 ae 5e 95 7d d3 d9 68 ca c4 74 00 be 51 c0 83 8d 7d c0 a3 9d a9 c0 e3 8d d5 c0 a3 95 01 61 43 a5 2d c1 63 95 59 19 43 5a 20 e6 95 d6 e6 60 07 37 34 c5 d4 5c 72 f2 2a db 15 02 d2 f2 06 5a 49 79 23 86 94 bc b1 56 42 de 88 96 0e 70 b9 92 8c 77 5d 4b 45 5f 6e d7 df 6e fd 95 ad 19 cd 41 56 bf 75 c3 4a 31 ab df 03 45 f9 a9 72 f9 c9 65 b6 4a ae d3 3f da bd be fe fa ed 6a a9 c0 76 e9 f9 e9 f0 c7 df ff e1 f1 2f de 7e fb 74 fa b3 db fd ec dd 38 4b be ff 17 e3 d9 77 f2 d7 3f 38 99 9f cc df 9e 9d bc 7c 7b f6 7a Data Ascii: V+5b_\Tc,Ml+\|evZS<.O 5}_,@2]-Ww25.^}htQ}aC-cYCZ `74\rZIy#VBpw]KE_nnAVuJ1EreJ?jv/~t8Kw?8\|{z
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: b6 23 25 84 75 b1 ab 57 af 82 6a 91 ef 67 37 03 6e 71 3c 60 bd 4c db f3 76 8c 5c de 64 f3 79 ba be 6a ec 75 dc 3d ee 48 a6 ca e1 ec 8b ce 7f 1f 5f 15 f9 46 fb eb 76 65 97 d5 5f 6a 2b d2 9f 3f 3d 53 39 01 be 1d 35 23 da e9 b7 8e 7e dc f8 a2 69 5e 14 f9 ea f2 14 f5 73 15 f8 59 3b 5c cd bb 51 5e 7e 5d 34 20 cb 74 81 41 e8 f8 32 aa f8 2f a3 47 09 79 5c 65 28 a4 80 ef bc 10 55 91 18 4d 8c e8 74 ae 26 ac 9e 08 1a b7 71 46 b0 9a b8 c1 4a c1 6b fb 55 e6 71 bd be 2c 59 b1 ec f0 f9 78 ec f8 f6 f2 41 a5 f2 ef e5 ff a0 ee d3 4a 4c 62 9d b9 33 d6 51 06 52 20 8c 20 f8 47 fa c1 aa fe d5 6c a7 b5 7b 6e 33 92 88 90 e6 0a ef 68 c2 88 54 c1 8e 64 a3 79 6e 4a 53 c0 e6 e7 b0 db b8 48 f2 d0 bc bd 93 a7 82 f1 c1 50 f8 65 f9 78 60 54 93 51 66 3b 5a a5 bb 5d 72 9d 7e 56 13 6c fc Data Ascii: #%uWjg7nq<`Lv\dyju=H_Fve_j+?=S95#~i^sY;\Q^~]4 tA2/Gy\e(UMt&qFJkUq,YxAJLb3QR Gl{n3hTdynJSHPex`TQf;Z]r~Vl
2024-04-26 04:11:54 UTC	4081	IN	Data Raw: 4a 3a 20 35 01 53 53 20 15 64 00 d2 d7 e2 58 62 6a 08 62 59 72 13 6b 6e 6a c9 b5 32 b6 f2 c5 6c f5 78 17 95 b4 a6 ac c4 9c 65 64 68 e6 67 66 47 07 02 d0 90 06 0b 1a 4c 07 db 0c 36 16 6c 25 28 76 84 30 84 98 32 13 5b a6 85 ad 8d ab 8d a9 3e 8d 41 31 0c ea 5e 62 cc 4c 6c 99 a9 39 d3 c6 d5 c6 b4 16 bc fe 78 a2 e4 cb 3f fe d8 af 1f 07 15 58 aa f2 eb 6c be e2 23 00 2a 39 53 00 14 41 81 ca 8a 10 c4 4d 2b 34 fc 74 af 33 2e a2 b8 22 12 90 26 06 92 4f 27 eb 62 86 bf 47 fb 96 2f 57 dc bd 3c 29 66 0f 9d 45 b9 5e d1 4c 96 ac 46 82 7e 22 25 ca 62 3f 5d 88 ee 6b 2a 6b 2b da f1 dd 14 02 4c f5 70 c0 35 b5 5c 8b b8 09 05 b1 ad 36 18 30 51 1d 07 76 be bc cf 67 23 1a ca b4 5a 0a d3 f8 e8 23 16 ad 7b 64 db 31 e1 1b 82 dd 78 04 04 db 05 90 74 0f c7 0e 47 48 9a ca a1 b9 33 b6 Data Ascii: J: 5SS dXbjbYrknj2lxedhgfGL6l%(v02[>A1^bLl9x?Xl#9SAM+4t3."&O'bG/W<)fE^LF~"%b?]kk+Lp5\60Qvg#Z#{d1xtGH3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49945	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	598	OUT	GET /builds/149f9b9/assets/onboard-frontend-app.css HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	681	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 39208 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:32:59 GMT ETag: "8b4232fbc8ce2af8bcd26eabbeeed4ed" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: H4fIWnDO7nEQKZI_Ds2SYCr.9DeR5OQl Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f0d2db130f25377126d8fc517e82fa4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: ed7kFnGMAGmB0tj-QZ73slZkvKxDshXrHa4eIUVXhKztcoqcL76Wwg== Vary: Origin
2024-04-26 04:11:54 UTC	15703	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 09 93 e2 c8 92 30 f8 57 98 6e eb 9d ae 2f 93 44 12 12 47 96 bd d9 e1 3e c5 7d 8f 8d 95 09 49 80 40 20 d0 81 80 b4 da df be 71 48 a0 0b 10 64 56 bf f7 76 bb b3 b3 12 a4 08 0f 0f 0f 0f 0f 0f 0f 0f f7 ff 9e 29 1b 3d 3a e3 78 f1 c3 fa b4 96 e4 e3 fb 6f dd 9d c1 a9 62 84 e5 d4 95 a8 ff f6 5d 53 f9 77 43 95 ff 84 65 b4 d8 d6 98 ca 12 1f 35 c5 69 54 d3 8f b2 a8 c5 b4 dd 1a 95 3c 7f 88 ea 0b 69 f3 26 2a fa ff 4d 26 c9 78 3a 45 a5 a8 c4 b7 cf 80 f9 bf 2e 70 7e 97 c4 99 74 f8 16 99 29 ea 9a d3 ff fc 4f 71 3d 15 05 41 14 a2 ca 56 dc e8 c7 ad f8 9f df 5e 9f 68 c5 54 66 33 ca 89 ee b9 01 f4 e6 79 a0 57 61 3e 07 52 d7 83 21 ea aa 21 e2 de 7f 47 43 69 8a d2 7c a1 bf 93 04 f1 f3 bf 7f e5 28 47 25 9d 03 05 bf 68 b0 9d d0 7e f9 98 db 8d Data Ascii: 0Wn/DG>}I@ qHdVv)=:xob]SwCe5iT<i&*M&x:E.p~t)Oq=AV^hTf3yWa>R!!GCi\|(G%h~
2024-04-26 04:11:54 UTC	1127	IN	Data Raw: 7e 6f 28 c1 70 47 94 f6 0e 36 60 92 32 cc bd 91 40 1c f4 40 c7 d1 dc 40 cb 0d 79 bf fb 8e e5 fe ee 8d 20 4b d6 61 5e bb 45 84 73 46 35 ef 66 31 94 ca f1 e1 33 75 86 af ff c6 41 59 7f 73 9e 79 91 0b 18 13 5b b1 bb e4 f5 83 bb 53 f1 1d 6d 18 f5 05 50 05 e7 8b 87 70 ba ae 48 c5 1f 20 ce 9b e8 24 0f 0e 7b 13 f7 9a 86 1f d9 b3 40 7a 04 69 4e 7e 13 c6 f9 c9 c1 0e 2b 65 9f 01 10 fb 45 00 cc eb 5b bb 47 fd 29 7d a0 bf 60 dd 9a 6f f7 b6 37 34 50 11 38 59 99 3b 35 57 8a d9 2f c2 1e e1 d9 64 70 46 a5 b0 82 c1 c0 43 33 6f 9b e6 e2 68 93 fb c3 13 a7 2b b8 b0 6f cb f8 80 90 0f b7 f5 bb 34 e5 c8 0a f1 2c 4d 9f f2 83 f0 02 f9 aa 01 56 56 e7 98 0f 2e 40 ee 25 e8 c1 db 4d 21 6b 3e 7b d1 29 34 f8 cf dc 79 0a dd 08 bc fe f4 fa 48 71 05 3b 85 2a eb ad 2c ea a2 10 f5 05 df 78 Data Ascii: ~o(pG6`2@@@y Ka^EsF5f13uAYsy[SmPpH ${@ziN~+eE[G)}`o74P8Y;5W/dpFC3oh+o4,MVV.@%M!k>{)4yHq;*,x
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 90 59 4e fa 72 01 8c 25 9c 3f 06 37 94 57 cd 55 35 df c9 37 8a 8d 53 1f b4 d3 27 db a7 c2 a1 d3 2b 66 3b f9 0a dd e9 57 20 1e 74 63 d5 3e b0 a7 45 0e 8c ad 0d 0f 8c 61 83 04 73 c1 10 0a 17 78 93 92 0b 1e 75 1f 1e 9c 77 e6 1e f2 74 73 d5 91 79 aa 71 e4 46 59 82 1b a6 8d 96 94 49 d5 e3 67 fe 47 e5 c4 3c e2 29 7d 32 ea 2c e0 fb 56 7c 61 8e 87 0d 75 32 6a cf 27 43 66 05 f0 38 c2 b9 cc b6 46 b3 2e 10 41 d9 d6 a2 da 29 14 fb 62 43 65 07 04 b9 2f 17 fa ed 99 40 a4 d9 d8 5e d7 a7 2d 75 c9 c5 0b 15 95 6b 2b 7b 29 d3 ac 66 32 c5 63 2d 3b ab 64 92 ed 55 25 37 5b 65 56 79 29 4f 17 06 47 da ec ac 9a b5 72 7e 59 58 64 18 b3 5d ae 96 33 d9 fa 22 c3 1e a5 6e b3 32 8e eb f1 d8 74 9d 8c 2b 2f 93 e9 6e a7 1e 4e 0d 55 3d 10 6c 27 5f d5 4f a3 9e de 63 63 fd 35 29 ee 77 ba 9a Data Ascii: YNr%?7WU57S'+f;W tc>EasxuwtsyqFYIgG<)}2,V\|au2j'Cf8F.A)bCe/@^-uk+{)f2c-;dU%7[eVy)OGr~YXd]3"n2t+/nNU=l'_Occ5)w
2024-04-26 04:11:54 UTC	5994	IN	Data Raw: a7 a3 e3 dc 3f ad 2c 56 f3 55 ef 5c ae 1e 15 8d 7c 42 dc dc 8a 82 b3 3d ce 0e d7 2f 6f d4 02 85 ed fe 38 fc 6e d5 aa c3 f5 fc 38 3c af 76 42 4e 75 dd 6c f7 fe d4 cc 71 a9 42 1f 5a 05 68 c9 2a 38 13 c3 f0 83 f7 65 c9 7b fe e5 a4 f3 43 d9 9f 6f 99 03 6b d5 c7 aa 25 97 8b 83 2f 78 1e c0 e7 62 e5 ac 67 64 3f 56 f8 e6 c1 97 73 0d ff dc 9d 0d bf 07 95 d1 9e f9 6f dc b5 5a f2 e3 40 ae f8 71 5c af 75 73 f1 fe d2 27 e6 19 31 26 0a b2 a6 dc 69 62 04 55 a7 a8 cf e7 b3 b8 78 f9 1c 9c a3 38 d4 89 13 2c 5c 25 84 ba 5c 72 59 78 a1 3c 2d bb bf 96 4f 0a 1e 77 13 79 3d dc b2 cb 52 79 ac 15 a3 3c f7 61 ba d2 1e 0c 65 2e 8e 3f dc 20 f6 a0 41 ac f0 d2 7d 19 d8 5c 4a 4a a1 95 39 77 bc e6 e8 b0 00 5e ae 1d 1c 0c 4f 79 ec dc 13 86 ff c4 be 86 7f 0c a7 ae 1e ba be 1a 15 d7 b1 92 Data Ascii: ?,VU\\|B=/o8n8<vBNulqBZh*8e{Cok%/xbgd?VsoZ@q\us'1&ibUx8,\%\rYx<-Owy=Ry<ae.? A}\JJ9w^Oy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49948	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	569	OUT	GET /builds/149f9b9/assets/vendor.js HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	697	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 1848609 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "74ecc435427fdb64437ab27e296f62e7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: ItHL3T0GgA9T.Nlo51ckc0ldOWHaD743 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 80677c288b4024a45c671874b4fa625a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: KIWUZgFrtkAzhST4mXsPHX9Qkbw9KLajncaAbaTGb68slUquqK0TfQ== Vary: Origin
2024-04-26 04:11:54 UTC	3391	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 8b 7a db 36 b6 28 fc 2a 16 a7 db 25 23 48 96 92 b6 e7 0c 15 46 5f 9a a4 6d da a4 c9 24 ee b4 1d 59 f5 a6 25 58 66 43 91 2a 49 c5 71 2d cd 9b 9d ef 3c d2 79 85 7f 5d 00 10 20 29 27 33 7b ef 3f 5f 6b f1 02 e2 ba b0 b0 ee eb 3a c9 96 f9 f5 f0 d9 fa 42 16 cf 7e fc 7b 74 b9 cd 16 55 92 67 be 14 55 70 7b 99 17 fe fb b8 38 2a 8e 92 ec a8 0a e4 ac 98 47 15 fc 99 14 b2 da 16 d9 91 dc fb d7 6e 05 bb dd ed 5e dc 7e f3 ec f1 e9 4f 6f 9e bd 0d e1 e6 d9 2f a7 cf 7e 7c 7a fe fa cd ab d3 57 a7 bf be c6 87 6f ab 22 c9 56 61 6f 2c 9e c6 95 84 df bd 38 7f fc fa f5 8b e7 4f 1e 9f 3e 7f f5 e3 f9 e9 b3 97 af 5f 3c 3e 7d 76 fe f3 1b 78 fc ec 0d 96 3c 7f fa ec 9b c7 3f bd 38 3d 7f fc f6 d7 1f 9f 9c bf fa fa ed b3 37 7f 7f f6 e6 2d bd fb fe 6f Data Ascii: z6(%#HF_m$Y%XfCIq-<y] )'3{?_k:B~{tUgUp{8*Gn^~Oo/~\|zWo"Vao,8O>_<>}vx<?8=7-o
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 91 8a 8d 58 8a 85 58 8b 1b 71 29 56 e2 4a 9c 8a f7 02 88 e9 32 f9 f3 cf 54 7a fd f1 3d c4 8a d8 5d 20 ac 2d 6e e6 0f 58 cd c7 f0 ff 9b 68 8b 42 e7 67 fc f3 96 7f 9e f0 cf bb 6e 4a 1c 79 24 c0 1f fe 32 02 9e 58 00 ca 79 0e 27 5d 93 a1 7b 85 10 f9 34 7a 85 aa 2d f1 1a 7f 91 2f bc d6 17 1f e0 82 19 d1 1f 0f 99 73 40 e7 2c e8 2a 00 ba 0a 3e 33 c9 c2 03 ba a0 95 38 1a 6d 0f c6 7b f1 32 f2 16 57 72 f1 4e 2e 77 a5 4c 49 43 bd 8b cb 9b 6c b1 8b b7 55 7e 09 a3 2f e9 0a 4e 97 9b 1d ea d7 8a 3c 2d 77 c0 6a cb 62 b7 4c ca f8 22 85 0f ae 92 e5 52 66 bb a4 84 ed b0 4b e1 18 d9 ad b7 69 95 6c 52 b9 83 d1 65 3b 40 54 cb 3c 4b 6f 76 8a b9 87 b6 16 f0 62 e9 89 17 91 37 3b 3b fb 70 7f 74 76 56 9d 9d 15 67 67 d9 d9 d9 e5 dc 13 df 44 9e 3f 0d cf e0 1f bc 5e c6 83 cb c7 83 6f Data Ascii: XXq)VJ2Tz=] -nXhBgnJy$2Xy']{4z-/s@,*>38m{2WrN.wLIClU~/N<-wjbL"RfKilRe;@T<Kovb7;;ptvVggD?^o
2024-04-26 04:11:54 UTC	8949	IN	Data Raw: fe 2e 4a 04 f6 f4 5a 95 e4 67 b9 fd 4d 26 ac af 30 b8 83 21 4c 93 69 d2 f7 bc d0 4a 01 ff 9d 23 cb ba 75 82 4d b1 1a b5 ce db 67 12 6e 44 55 70 20 8c af 32 3d d3 05 81 aa ec d9 27 9e 6e b5 e2 ba 37 c1 6d aa fc 3b 17 65 89 be 28 91 b7 51 d9 1e c3 f8 82 82 d8 ca 49 2a 2f ab 70 30 c6 7f 9b 0f 13 1a 6f f8 d5 08 2e d7 d0 70 92 0d aa 7c 13 e2 9b 4d bc c4 58 78 e1 68 72 91 17 4b 40 09 23 8f c2 ba 76 57 af 13 7a 4e 94 67 69 48 de b9 f0 e9 87 41 99 fc 89 f5 70 2d 03 78 32 41 b1 fa 65 9a 5f 87 25 45 d0 53 2d 87 f1 b6 ca 75 63 76 0f ec 7e fe c7 84 fa f7 1f 9e c8 5d 07 c5 d4 a5 df 36 2a 3c 3e 8b f5 dc dd 07 ef f2 c8 83 3a d8 c6 39 df 00 07 37 be 8f 72 24 1f 83 59 61 5f 30 0a 40 60 86 5b 60 90 80 c8 83 d6 01 49 46 0f be 52 45 e9 31 3a 32 9b 27 d4 cb fa 3b 3d 3b 91 a7 Data Ascii: .JZgM&0!LiJ#uMgnDUp 2='n7m;e(QI/p0o.p\|MXxhrK@#vWzNgiHAp-x2Ae_%ES-ucv~]6<>:97r$Ya_0@`[`IFRE1:2';=;
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 10 dd cf 5e 22 ef 25 69 0c 31 12 e7 6d c3 84 84 fb 62 be bd 7d 55 21 1d 94 48 69 00 ad 1a 3a 54 09 86 03 b9 7f 1c f8 92 43 6e 30 43 a2 5f 84 6b b1 b0 54 47 3c 59 de 0b 48 e5 2e af 02 a6 e9 53 8c 73 c4 dc d3 20 14 5d 8a 23 4b 6f 4a e7 6a 79 93 67 9f 5a 71 f7 c8 df dd a7 8c 50 74 a4 d2 95 77 9a b5 34 93 69 8b f2 47 24 8d 26 62 c1 07 28 72 89 d7 e2 52 7c 04 76 2c ef 4e 11 24 98 42 a3 d0 47 d7 89 20 a2 68 47 69 4f 89 c2 05 12 2d e1 0c 17 f4 b8 f7 0d 70 6e 13 f8 15 7e b5 07 dd 2f bf fd 7a 6f ef fe fe eb bd 6f d0 90 85 68 c3 fe 65 2d 7a dc 42 d7 32 89 36 a5 10 22 16 98 90 57 ad c6 2e ac 34 a8 68 81 46 8c 60 61 0c c3 2a 88 25 a3 c4 40 b1 66 53 d0 16 56 63 23 2b 7b 8c 1d 1d 33 93 1e b9 40 8e a5 20 52 40 19 90 89 48 a1 f5 73 a1 e5 ef 34 e8 5e 42 bf 3f e0 e1 87 8d Data Ascii: ^"%i1mb}U!Hi:TCn0C_kTG<YH.Ss ]#KoJjygZqPtw4iG$&b(rR\|v,N$BG hGiO-pn~/zoohe-zB26"W.4hF`a*%@fSVc#+{3@ R@Hs4^B?
2024-04-26 04:11:54 UTC	9200	IN	Data Raw: 6c 4e 3c b5 74 ca db 39 69 e2 4f 2d 56 cd e8 38 dc b5 70 5a 91 f8 10 33 9c e1 31 66 8d 92 18 13 2e 82 bb 1b 20 eb 9a 23 28 9c 95 fa 08 9c e3 52 75 d6 89 67 6d ab c7 3a 6e 28 58 56 63 37 9a df b4 c2 38 9e d3 5b 04 e1 19 37 01 c1 a8 f4 72 9c e9 a5 e7 5e a2 3d 45 de 01 6a 52 e8 7c 2e 65 f8 dd a0 14 a8 64 18 a2 79 60 53 c5 2c 52 f5 9c ab 0d d5 92 e2 42 81 99 7c ae 4d 38 06 d3 b1 09 14 2d 70 4d 38 70 bc 8f c2 bc 1a 8e ae 60 78 0a 4c 48 31 6e d5 20 3b 3d b5 c6 5b 66 5f e0 60 b7 92 89 6d fe b3 03 53 d1 fa 47 45 a8 b5 a6 26 0b ac 65 a5 f8 82 03 65 f2 35 0a 9d 56 dc 32 c3 44 e3 a0 3b 23 a1 22 02 09 50 27 7d 7e e2 89 aa c5 c7 90 68 69 0a 7e 9b 16 0d 8f 57 54 43 25 99 a8 a9 1a bd de d4 6a ec 35 21 56 c9 58 8a 95 91 54 9b ea 32 4f 1f 5d 21 b2 1f a8 bc 93 e8 34 d5 2d Data Ascii: lN<t9iO-V8pZ31f. #(Rugm:n(XVc78[7r^=EjR\|.edy`S,RB\|M8-pM8p`xLH1n ;=[f_`mSGE&ee5V2D;#"P'}~hi~WTC%j5!VXT2O]!4-
2024-04-26 04:11:54 UTC	1307	IN	Data Raw: 1e 40 c9 2e 95 2f 29 ab 65 1c 1d d7 e4 43 e6 3d 7d 5e 1b 88 9d fa bf 2e 31 20 ca 62 f0 d5 11 fa 3a b2 25 59 c4 8f d1 03 ed 08 b3 1e 68 44 29 4f 97 e8 20 01 c7 80 6b 35 3e 5d 54 14 98 24 34 f7 ab fa e4 07 4e 2f 08 13 13 ff b7 3a f3 8f 3a 99 0f 4c 5a 28 f1 ae f9 fe 95 b2 b6 97 0f ed 80 78 e8 fd 28 df 51 e6 30 fc 90 fc 8d 99 bb 06 51 88 c0 aa e9 25 7a 6e 3f cb 0f 94 d8 83 df 0c 14 74 b6 95 a4 60 00 94 f0 0c f3 78 3f e4 1b 74 ba d3 21 de af ab 6c 06 cf b8 b8 d7 ad 39 bf 1b c4 a6 b4 ce 29 1e 2c 6e e0 9f 29 d2 15 a7 06 69 7b 64 c5 16 d3 9a 92 58 06 ff 32 a0 1c 7a 6a c9 50 d7 5e 11 74 2b fb 8d a1 1b 2c 79 88 18 a6 77 35 0e 95 04 b5 e9 6d 95 dc 78 6c 7f 38 7a cd 16 08 14 15 e1 4e 51 42 55 38 fc ca 7a c7 a8 0a 39 9c 82 5c 86 22 82 7a 6b 55 82 21 4c 55 8f ae b9 f2 Data Ascii: @./)eC=}^.1 b:%YhD)O k5>]T$4N/::LZ(x(Q0Q%zn?t`x?t!l9),n)i{dX2zjP^t+,yw5mxl8zNQBU8z9\"zkU!LU
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: fe 05 93 0d ff f4 97 0f 87 47 bf 4e 5e bd 3d 39 fc c3 11 b9 14 6d 6f ff 6a 79 9a bf d7 98 48 0c f8 aa 23 e0 b0 7e ae d3 2f ad 84 3a 36 4c 77 81 60 87 0a 27 45 3b f9 21 de dd 5a fb d2 ef fe 7e b2 93 ff 09 53 d7 09 fb d2 ef 93 d3 1f d1 e4 41 f6 17 6b 0a b1 7f 5a 33 86 b1 47 88 64 07 26 6e ea 9f b6 40 a8 1c 28 2b 0c 10 bf d6 2e 04 ff 2f f0 9b 62 84 95 d6 fa 87 80 1b b4 36 dc 09 d7 04 e3 c0 4d be 88 ca df c6 44 8f ea 40 98 c8 4f a3 96 94 e9 ad 0e 0d be c5 66 b5 9e 2c 61 1b e0 e8 96 2a 1c b5 09 8c b2 d2 80 50 2a 2a f6 97 9a 63 65 7f ad 65 30 ac 2a c3 61 b0 7e 62 17 38 ac 49 a6 7d 9b 2f d6 87 8c f6 74 9e 15 74 17 b5 e0 39 63 17 c9 0c 6f f8 4a c7 38 0f 71 1c 29 e2 0e b2 ad 57 05 b7 63 70 6f 66 3a 6c 87 60 fb 76 cf 28 3a ad 49 57 e9 eb ec a6 75 dd db 60 c5 5c 87 Data Ascii: GN^=9mojyH#~/:6Lw`'E;!Z~SAkZ3Gd&n@(+./b6MD@Of,aPcee0a~b8I}/tt9coJ8q)Wcpof:l`v(:IWu`\
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 56 29 fe c0 e4 41 8d 11 c0 db 1f 88 0f bb 46 1c ec 06 4a c6 22 2c 9e 00 2f 19 e6 cd 6a 74 5f 5a f6 64 74 b9 56 7e 86 e2 a5 8d 9c c4 b9 68 b4 2f b1 a3 66 74 2a a0 d3 9f 7b a9 88 04 61 bb 95 e7 07 b1 ef 71 cb e1 bf 64 3f c3 3f b2 06 b7 a4 4d be 6d 14 06 1b c9 2b b9 81 b1 2d d0 f8 ed 10 c8 22 c1 e4 a2 09 66 2f c5 4c bd d9 59 5a 24 25 fe 03 ed 19 e3 21 36 57 6f dc 5c 9d 34 e8 8e 86 86 45 4d 4d fc 56 97 d0 60 83 5e ab 0d b5 da 9c a5 4b 7d 34 ab 2e 22 9d 8f 89 ab b2 52 ac bc 30 a2 05 ba 71 b3 15 1d 55 1e a4 67 11 e2 6b 41 3e 4c e9 92 99 e9 59 4a 29 e3 61 b6 2f 30 d5 a6 1e d8 e5 43 e7 f1 12 06 36 50 a9 15 f5 3b f4 c4 bb 84 c7 0c 3e 36 e0 0c cd 58 fb 55 9a 03 63 9a 9c a4 57 6c 08 45 f6 90 59 fc 2f 5a ca 92 88 ea 40 ad 4e 10 b3 81 12 65 e2 f7 e7 f0 61 d6 a8 2d be Data Ascii: V)AFJ",/jt_ZdtV~h/ft*{aqd??Mm+-"f/LYZ$%!6Wo\4EMMV`^K}4."R0qUgkA>LYJ)a/0C6P;>6XUcWlEY/Z@Nea-
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 36 56 7b cd a4 cc 5d 91 d7 d5 5e d6 f9 cf ff 7a bf 77 f2 cb 60 ff e8 6c ef ed c9 b6 10 5e 8d 3b cf 8a 96 a6 66 8d 94 a9 4c 9f 40 7e 58 75 43 62 fb aa 44 5d 2b d2 8a 12 87 ef b4 28 15 b2 44 cd d3 06 e7 44 b5 1e 8d 71 52 58 5b a9 b1 79 12 bc df ef d8 31 73 c2 44 90 ce 73 98 99 43 7c 97 e6 75 2e eb 7e 2d 3e df 96 03 6a 2e 73 bf b4 48 f6 5e 7f c1 7f 72 fd b8 e2 60 35 a7 3f 10 7d a6 9f 8f 1f 75 3c af 78 e4 3e 3d 96 27 1b ca 6c a0 ec 39 92 ed 98 f8 f7 93 64 96 85 21 cb 3b e8 3b f9 88 fd 43 9f b0 e9 7d 0c 65 f0 0c 8d 7b ef fc a0 f8 ac 41 dd 93 f1 51 a3 b0 78 f2 64 36 bc 85 43 37 cd bb 0e 7d 9f e2 37 5c b2 f0 1b 41 3d 44 f0 21 7c 8a 50 20 26 02 f7 e2 91 08 e3 db a8 08 de 61 b1 0b 5e e0 f0 c6 d6 75 c4 4d 8e 42 66 53 fa fd 7e 4a bf e8 ae 48 01 ef f8 d6 48 4d e0 5c Data Ascii: 6V{]^zw`l^;fL@~XuCbD]+(DDqRX[y1sDsC\|u.~->j.sH^r`5?}u<x>='l9d!;;C}e{AQxd6C7}7\A=D!\|P &a^uMBfS~JHHM\
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 15 1a a5 ae 52 d7 7e de f9 69 fb 74 70 b4 7d b6 ff f3 1e 2a 33 ff f7 2f fd 36 23 07 f2 b5 1a 07 a2 9b 7a 76 b3 43 81 2a 3b 40 28 9c 80 3e 7f 83 81 f7 22 b9 71 f1 d9 c1 ea ea 62 ab 23 ae 86 fc 09 88 dd 8e 03 e0 46 af 90 88 61 a5 67 0a 75 f5 23 ed 67 c0 e3 dd 4a a3 10 08 bc 62 6f 21 c0 f8 71 c5 32 b3 62 b3 f9 bc 5b ae 7b 62 26 89 b1 ee 01 70 43 50 d5 f3 0b 5d 6c 60 14 9b c8 62 23 a3 d8 98 03 cd 89 9a b8 36 1e 6e f5 7d 2f 80 0d 6e f1 54 a4 47 6e dc 00 aa 26 00 f9 37 20 00 52 5d 98 6c 63 75 81 11 9c 0c 8f 2e 30 14 a5 89 be 0b cc be 8b e6 ac cd ba ed df 5b 8c 0d aa f9 6a 9e 06 7f 19 ec 0c fe d4 9c 0c 16 6e 31 31 18 6d b0 2f 3a 35 b3 28 06 69 62 64 30 bf c1 95 63 d3 2c 26 05 43 04 77 42 ca c7 9a 2b c1 9f 06 37 82 f6 8a fa 80 b1 4d 14 86 06 13 dd a9 b9 5f 54 9b Data Ascii: R~itp}3/6#zvC;@(>"qb#Fagu#gJbo!q2b[{b&pCP]l`b#6n}/nTGn&7 R]lcu.0[jn11m/:5(ibd0c,&CwB+7M_T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49947	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	579	OUT	GET /builds/149f9b9/assets/onboard-frontend.js HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 792908 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:33:04 GMT ETag: "623d461c6669e0b477c8b8f62bf69d1f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: uL3u.iYsAjCG8A1uJ6tylVEhpwcrYlho Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3b6959d147738fd4bde35db4104f4052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 1y00JrgazOasFzDfwVaDAfUEX8DL3V55p78zyhzIJ-5rAqx1nOXvOg== Vary: Origin
2024-04-26 04:11:54 UTC	15688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 8b 72 db 46 b6 28 fa 2b 32 76 4a 45 d4 80 b4 e5 64 ce de 9b ba 8c 2f 2d d1 89 6a 64 49 5b 92 33 95 d2 51 c1 10 d1 92 30 06 01 0e 00 4a d6 c8 ac ba df 72 3f ed 7c c9 59 ab df dd 68 90 20 45 39 e3 24 53 35 b1 08 34 d6 ea e7 ea f5 5e 31 b9 4e 32 d2 f1 f2 ec 2a 8f 8a b8 7b 5d e4 59 45 b2 f8 65 34 9d 7a c1 85 47 3e 4f f3 a2 2a bd c0 fb 7f c9 e4 8a 14 f8 3c 4d c6 51 95 e4 19 3c ac 7d 56 90 32 4f ef 48 01 ef 68 fb 6e 9a 47 71 37 c9 92 2a 89 d2 e4 5f a4 28 5d 5f 8d f3 ec 3a b9 79 49 b2 bb 04 1e 4d 48 56 b9 5a cd aa 24 2d 5f 96 ff ec b2 e6 ae 26 25 7c 5a 3c 78 97 41 e7 7a 96 8d b1 93 1d 12 54 41 16 24 41 1e 14 41 e4 3f 1e 5f fd 83 8c ab 5e 4c c7 7d 52 e4 53 52 54 0f d0 c8 0b 43 52 be cf e3 59 4a bc e0 f1 2e 4a 67 a4 ff e2 d5 dc Data Ascii: rF(+2vJEd/-jdI[3Q0Jr?\|Yh E9$S54^1N2{]YEe4zG>O<MQ<}V2OHhnGq7*_(]_:yIMHVZ$-_&%\|Z<xAzTA$AA?_^L}RSRTCRYJ.Jg
2024-04-26 04:11:54 UTC	696	IN	Data Raw: 06 1f 5f 54 97 83 17 3b 73 90 91 4f c9 98 24 77 64 58 55 45 69 1b ad 39 d1 58 1a 07 74 46 80 d8 a2 ca 77 df 0c 35 d2 34 79 6c 56 84 f5 1b 6e c5 5d 4b 53 28 e5 71 b4 ed f2 fc fe 49 55 2b 37 e2 c8 82 3e d5 02 19 44 9d 3d 8e 8e 42 f0 34 68 7b b8 c0 44 a9 0b f9 6a 75 59 43 2a 8d cc 3a 7a 0a 2e b9 9c 17 c9 86 2c aa a5 8d c1 b5 31 9e cf 25 af d0 af e8 78 f5 7b 88 d6 34 7c 5a 5a c3 06 10 bf 93 8b 9a 71 1f b8 b4 cd d9 3d 95 1f 5b 9b 54 0c 26 1a 1b be 93 a5 a7 0c 79 50 a8 2b 37 fa f3 16 fb 23 dc 62 e5 a0 93 5b b7 58 b2 aa c2 aa 58 6a ee 16 d7 94 2a ad fc 1b ab af b4 1c 2d 2c 00 90 07 dd d2 2c c2 e8 74 2d 0a a5 8b 68 9d ba f3 50 ed 93 01 e9 55 51 01 14 82 ed 90 80 0b 69 f6 d8 f1 1a 9d c3 3a 46 9d dc 08 56 70 4c d2 45 b6 29 77 19 0b 99 18 fe 4a 3e cd 6e 08 70 5a 74 Data Ascii: _T;sO$wdXUEi9XtFw54ylVn]KS(qIU+7>D=B4h{DjuYC:z.,1%x{4\|ZZq=[T&yP+7#b[XXj-,,t-hPUQi:FVpLE)wJ>npZt
2024-04-26 04:11:54 UTC	1346	IN	Data Raw: 56 89 5f c9 85 71 a9 a2 dc a6 ff 4e a3 5c fd da 58 4a ae 83 72 23 1c 16 a5 2a 29 a6 97 97 49 01 4e 47 67 07 fb a3 a3 f3 40 3d 3b 3f 1d 0d cf 3e 9c 8e 4e b5 67 67 a3 bd d3 d1 f9 f0 f4 d7 4b 4a f6 67 83 9a af f5 23 92 29 3c de a5 46 f2 91 08 59 8f f4 80 68 fb 1d a5 07 f6 43 be 0a f6 63 94 8f 84 e0 17 32 59 d6 0f d4 e9 10 f6 a9 92 27 86 08 59 68 a8 30 68 95 9d d4 f7 77 0d 32 2b bf 60 b5 f9 f8 74 eb 4a d0 a8 28 a2 07 23 a7 92 ad ce 54 31 51 54 9d 19 a8 ba 07 e8 42 84 43 c8 db dc 76 f4 e2 6c 93 af 80 1e 95 30 d1 ef 32 89 51 bb 0b a6 39 ec c2 b5 f3 17 c0 c9 35 33 b3 ad 34 96 46 05 ee 58 6a bd 0d 63 a9 99 59 c3 48 4c a4 11 fa c7 a5 c9 87 e4 75 a0 67 bf 11 cb 2f 68 bb b9 f0 3e df 40 8e ce b2 5e 55 f4 7a ab f7 43 cb 9f d3 ea ae a0 49 21 6a 3b 52 c6 40 6d 91 de 24 Data Ascii: V_qN\XJr#*)INGg@=;?>NggKJg#)<FYhCc2Y'Yh0hw2+`tJ(#T1QTBCvl02Q9534FXjcYHLug/h>@^UzCI!j;R@m$
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: e4 ec 9e 7f a4 41 c8 e8 6f 73 3f e8 a4 03 2a 70 8b 4c 15 96 25 a3 12 fb 01 8d 21 2b f8 97 ea 3e 39 d7 46 a4 58 cc 7d 46 c5 53 99 ef 71 6a bd a0 a9 ce c6 d6 43 9e a5 73 62 3f b6 bd 5f 64 02 26 e6 3b 89 8f cf 18 bf 64 e7 53 2d 5a e9 27 b5 f9 d4 8c 6c bd 59 56 d2 2a 7e 8f ec 3d fb c4 54 4f e2 a5 30 2c aa 64 9c 12 a6 a0 fc cf d7 af bf ef 62 4b e0 08 50 41 df 2d ff 39 c3 f8 c9 fb a4 ba ed 46 dc fa 1c 5d 65 4c 67 29 bb 4f 0f a5 da 36 b0 83 94 80 ce 8f 31 e9 e1 ae 09 68 14 c1 41 2c 7e d2 2d df a7 87 05 3b 10 50 5f 51 c3 2a 48 7a ae 1d e5 d3 5d c2 82 51 a5 e3 91 94 d1 65 48 4b 5f fe 45 a7 a7 ef f6 46 0a 80 59 ce 31 31 53 45 78 7c 5d 43 43 20 78 2e 1a f1 c6 7b 37 3c 3c 1b 79 7d 0f 7e 8e bc b9 bc 6a 1a b2 83 7f a0 79 c6 85 09 50 8a 47 6d d1 6d 6f 37 c0 fd 85 ba 08 Data Ascii: Aos?pL%!+>9FX}FSqjCsb?_d&;dS-Z'lYV~=TO0,dbKPA-9F]eLg)O61hA,~-;P_Q*Hz]QeHK_EFY11SEx\|]CC x.{7<<y}~jyPGmmo7
2024-04-26 04:11:54 UTC	1514	IN	Data Raw: 7d 7b 74 30 3c 3e 39 1e 9e 9e 9d bc 3b 3c 5f ef 94 b9 09 d4 da 07 cd 06 b7 c1 c5 b5 dd e3 61 75 74 a5 13 b2 c5 3b 61 6b e4 99 d9 50 3e f4 5b d7 39 1b 8a f2 d3 49 61 bc ef e3 84 9c df fa d1 eb bf 62 02 22 8c 76 0b 43 32 56 8e 36 e9 4f fe 1d 39 11 28 77 b3 23 e2 a7 d9 6b aa 57 b7 6c 2d 7e b1 ad 45 68 32 35 9b cb 17 61 50 c1 e4 aa a7 d4 4c 4d 53 b9 bf 67 c1 f5 1f 83 34 a0 d1 30 a2 4c b3 6a 7f 18 8d 78 34 51 c9 67 b7 d6 67 b2 b6 d8 d0 7e 01 93 1b 8b 2a 57 73 eb 25 2f b6 74 6f 3d 96 25 ab 06 d6 0b b3 66 d6 49 0e 1a 99 9e 33 13 13 dd 77 07 d6 7b 5a 15 e9 dc 7a 68 6d ce b4 e9 7d b6 67 24 1a 93 2f 27 d7 22 6a eb 6d dc f4 4e f3 4d 0a 96 7c d7 6a b9 c2 0e f0 8e 73 4b 73 7e 4b 12 b2 1b cd 3f c2 86 88 93 53 07 ac a6 b7 67 cf 0a c6 1d 59 83 3c 0a d0 65 e7 d0 6a f9 79 Data Ascii: }{t0<>9;<_aut;akP>[9Iab"vC2V6O9(w#kWl-~Eh25aPLMSg40Ljx4Qgg~*Ws%/to=%fI3w{Zzhm}g$/'"jmNM\|jsKs~K?SgY<ejy
2024-04-26 04:11:54 UTC	15894	IN	Data Raw: b8 c6 eb 5d 93 97 2b f4 33 8a ab 75 93 bd 53 27 56 74 b3 c6 2b 67 c9 87 ee cf 4a 2e 9a ed 11 13 b5 2e 8d 93 12 52 b2 c8 d1 c4 fc 4d b6 94 b8 e4 19 83 bc 5e 64 0d 3a 44 80 c4 eb c1 ba 98 f5 d7 41 3f 68 d2 12 41 3d b0 af 20 72 25 74 b3 99 23 aa 7f aa 29 22 ca 1d fe 36 84 3a 44 fc c3 09 e0 37 a9 b4 73 9a 68 e3 0e 36 56 93 b5 9c cd 91 d7 61 a9 69 ba 4f 10 d6 52 63 b4 0d b2 82 f5 1a 20 fb e9 3c 1a 35 64 3a 41 90 67 99 ac bf 4c 3c 6e eb d2 d6 10 56 e0 38 a6 95 06 de c6 2c 01 28 77 40 ae cc f0 bd a4 ce c4 7c 7b e7 cd 10 30 aa 64 fe e0 df fb c0 97 d0 46 46 2a 78 3d d7 a3 10 c9 16 ac ae a0 54 20 2d 2c 00 58 0e cf 26 af b0 ec 2d 37 83 4d 9f e6 15 1a 1a 16 3e 6b 46 a5 78 be 6d 75 63 3c 08 bd 77 18 a8 0f 1d 24 61 4a e4 04 55 5c 5e b4 d4 e8 a5 f7 b6 21 12 15 55 c5 11 Data Ascii: ]+3uS'Vt+gJ..RM^d:DA?hA= r%t#)"6:D7sh6VaiORc <5d:AgL<nV8,(w@\|{0dFF*x=T -,X&-7M>kFxmuc<w$aJU\^!U
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 3d b8 91 f0 ed b5 fd 96 13 21 7c 77 57 f0 0e 08 d4 0d 7b b5 18 07 e3 c3 28 85 e5 3f 08 09 aa 67 84 a6 27 37 f7 fd 4f 5c 81 74 17 90 7b c9 a4 74 ff f4 a0 f3 2c b8 8e 8b 4f 06 1b a3 96 c6 50 47 7d fa 53 01 9e 45 17 b6 0d 21 19 5c 51 f0 cd a7 76 1e 98 36 b1 2b 82 9c aa 2f 5d 80 0f c7 0c de 30 18 bf 8b 13 3c 16 92 3d ea 84 d0 a0 83 6c 94 fd d5 eb 35 c6 f6 ba 70 70 af d7 1e dc eb 25 a3 7b bd 74 74 af c5 e8 d4 e6 cb 7f 21 de 89 b6 fa 66 cc b7 66 6f 3b d4 be 29 3e 90 fb d3 d1 9c bf b3 db a6 82 f3 a0 14 09 ae 0d c9 3c 74 27 fe b4 d5 22 fd 7f b4 1e 22 60 66 7a c6 94 39 37 ac 84 d9 25 b8 7b 61 bb b6 e5 5d 27 d9 6d 7f 0a b7 02 d2 54 b8 8c e0 0a 6a 2f b4 5e 12 41 fb 3f 39 f6 7e 87 42 04 49 d7 ef 0f 5b ba cc 6d 52 3a 5d e6 de 54 47 69 e1 71 10 cd fa b0 85 05 a3 d2 e9 Data Ascii: =!\|wW{(?g'7O\t{t,OPG}SE!\Qv6+/]0<=l5pp%{tt!ffo;)><t'""`fz97%{a]'mTj/^A?9~BI[mR:]TGiq
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 3f bf 10 17 9e 1a cc 01 e9 84 fc b3 ad ff c9 a6 a3 06 52 26 e9 be 1d 8d f0 67 d1 bd 38 da 3f 3f f8 65 70 72 7a 32 b8 78 77 76 76 7a 7e 79 74 48 ba 26 14 ce 64 26 a7 d0 25 f2 c5 61 50 06 e4 74 32 52 ba fa f6 5e be 78 f7 f3 cf 47 17 90 de 09 33 ee 28 2b 21 6e ef 55 8e e7 d5 35 07 05 70 bc 74 af 88 98 b4 b4 3d b3 21 b2 27 0b 5e 53 21 2e 2d 79 ec 80 c1 29 9d 56 d9 20 1d 6e d5 95 c1 95 54 15 4c ee 6c bb 2b 5d d3 60 10 09 cf 3c 3a 1c bc 3d 3d b9 fc e5 cd 3f 07 e7 10 f3 fa ee 68 70 7a 06 c3 7b 41 ca c0 a0 44 45 f9 96 f6 e1 9c 76 e1 54 46 90 80 2e 1e ad c4 75 25 92 ec a1 fa b5 86 bb 95 f7 bd ed ce ce ff 6c 6f 6f 7b bb 73 be cb d9 27 41 df 7b 49 ca 6f 77 fe ca 3f 9b d7 a0 80 7d 59 f4 bd bf c1 97 df c3 47 73 3b 5a b0 af 92 be 30 e8 5f 3d 95 d2 29 51 c5 f8 aa 0b 08 Data Ascii: ?R&g8??eprz2xwvvz~ytH&d&%aPt2R^xG3(+!nU5pt=!'^S!.-y)V nTLl+]`<:==?hpz{ADEvTF.u%loo{s'A{Iow?}YGs;Z0_=)Q
2024-04-26 04:11:54 UTC	2048	IN	Data Raw: 9e 46 9a 7f d8 82 f7 82 d5 3d d5 ac c3 b1 88 12 4a 8c 3a c7 b1 65 58 e9 54 a7 d4 3f 17 19 cd 40 50 ab 71 42 5b 1f 76 59 d2 7f ba 8a e7 7b ae 5c f7 1a 04 15 69 8a c6 42 24 d9 92 19 d7 00 a3 06 52 1d 0d c0 44 87 77 68 49 9a c5 9c ae 42 28 89 89 ac 18 85 32 a1 83 52 bd c3 df 66 15 52 b7 11 61 e1 a4 43 13 d5 47 45 21 e7 70 87 5a 47 cf 54 72 33 7f fa 07 9a bb af 30 67 5f 69 ae b4 39 42 71 37 ec 67 96 b8 eb bc af 07 8f d9 94 62 4e 78 95 7c 07 ff 22 bc de 33 f8 62 c2 4f c9 bc 0b 68 7b 8b 39 d1 40 15 fc c0 72 ba 88 b2 e6 2b b0 7e ae c3 58 ff 92 3e 38 89 1e 7e 7e c5 9c 03 aa 0e 1f ad d8 1e c6 da 29 ba 3e 7c 2a 21 50 c8 48 29 69 ff 58 de 3e b4 89 fa 76 0e 40 72 06 81 03 52 5a d0 40 77 72 55 46 5c c0 cf b3 ee 77 4f 8a f5 42 cd 58 36 a3 19 1e 3f 82 7a 86 5a f9 6b 6a Data Ascii: F=J:eXT?@PqB[vY{\iB$RDwhIB(2RfRaCGE!pZGTr30g_i9Bq7gbNx\|"3bOh{9@r+~X>8~~)>\|*!PH)iX>v@rRZ@wrUF\wOBX6?zZkj
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: 13 53 b5 7b 83 70 5b 91 19 96 0a d3 f5 2d 0f 2a 5f 42 8f 07 27 6b f9 60 e0 2b f7 63 fb b0 76 5e e0 8a 16 6d c9 83 eb cc a4 41 ef 67 b6 56 7f c7 52 3f de f4 6c 8d c0 89 49 80 de 19 6d ad fe ae 59 bf 76 fb b4 35 32 47 26 99 55 f7 58 97 43 ea e8 18 8c 37 26 9d 73 43 7a f2 7c 09 4d e9 9b 4d b1 5c 91 ed 84 fa 33 a4 fe c9 a4 6e bf 7d bb bc 79 e8 88 1f 9b 84 4a 2e f0 2e af 1f 4a cd a0 65 b3 35 03 99 c9 6a 97 c4 d5 d5 d4 dd 73 d5 45 d1 dc 1e 5a e6 88 4b 6f 4d 8a c6 9d 73 39 25 ed f6 f9 f2 6e 6d 52 ea f7 e5 b4 2a 5c 7d 5d de ae 49 bf c2 bd 60 69 9b f2 d6 54 68 c4 60 cd 46 58 2a 59 31 12 8a 35 15 e8 9d ae db 69 f5 f3 72 4a dc 7a e7 5e f6 d6 24 22 cd 89 65 f5 db 8c 81 6b 79 ef ae ae 6d c3 45 a5 98 a8 36 6d 4e 85 ba 37 6c 9c 6a e2 db 41 fb b4 ea 8d 26 9e ab de d0 6f Data Ascii: S{p[-_B'k`+cv^mAgVR?lImYv52G&UXC7&sCz\|MM\3n}yJ..Je5jsEZKoMs9%nmR\}]I`iTh`FX*Y15irJz^$"ekymE6mN7ljA&o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49944	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	580	OUT	GET /builds/149f9b9/assets/public-web-styles.js HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:54 UTC	695	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 57793 Connection: close Date: Fri, 26 Apr 2024 04:11:55 GMT Last-Modified: Wed, 24 Apr 2024 18:33:04 GMT ETag: "aedeff6961cd8308a20a7db90c8e321a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: Vv7rNPae433YIukyCHJBDE9E2xi.6qW0 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 982dd7ed309ab3025635ef6f0ff61e82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 63tp9MzGhrCDjTsfVO6Wi8LFmVJYm80GjJceQZgsjDjynA_P3Gbc8g== Vary: Origin
2024-04-26 04:11:54 UTC	15689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd 89 7a db 46 b2 28 fc 2a 12 c6 c3 00 66 93 22 e5 65 12 50 08 af 22 cb 89 27 de 8e 29 67 19 92 d1 85 c8 26 89 18 04 68 2c 5a 22 70 de ec 7e f7 91 fe 57 f8 ab aa 17 34 40 50 f6 59 6e be 58 04 d0 dd d5 5b 75 6d 5d 5d 7d ed 27 07 9c 65 2c 1a 1c 2e f2 68 96 05 71 64 73 e7 de 8a af fe e4 b3 cc f2 bc ec 6e c3 e3 c5 01 bf dd c4 49 96 b6 5a 56 1e cd f9 22 88 f8 dc 3a 54 89 eb 78 9e 87 7c 28 7e ba 32 ab c7 6d c7 b5 14 d0 12 92 28 dd 6a 89 df ae bf 9e 0f c5 a3 3d 9e 32 ee b8 76 53 0d 37 41 34 8f 6f 86 e2 c7 6d ca b1 0c e3 2b 3f 1c 8a 9f c6 1c 29 0f 17 43 fc e3 66 ab 20 75 ba e7 d7 3c ca d2 2c e1 fe fa 2c 0c e0 19 5b bc b5 6d 3d 0e ce 7d c2 b3 3c 89 0e d4 97 03 6e c3 48 b1 c0 b9 d7 5f 12 3b 65 be 73 1f 2c ec c3 68 9c 4e c5 53 46 4f Data Ascii: zF(*f"eP"')g&h,Z"p~W4@PYnX[um]]}'e,.hqdsnIZV":Tx\|(~2m(j=2vS7A4om+?)Cf u<,,[m=}<nH_;es,hNSFO
2024-04-26 04:11:54 UTC	301	IN	Data Raw: 88 f6 6c 36 df 93 0d c6 e2 1d 46 fc 70 74 4e 40 51 53 8b 66 da 12 7a 88 a1 83 70 5f 17 c3 c6 e0 c2 42 bb af 53 62 da 4c 66 77 e7 f2 a1 8c b7 24 f4 c8 64 3b 1d e4 27 f1 20 97 91 82 aa dd cd 65 77 1d 68 00 b4 15 c8 cf ca 01 e4 9e 96 24 0f 0b 08 a3 b9 91 5d 8e b5 d8 71 c3 af 72 53 db 41 bb 8f 18 ec c4 6b b7 73 0c 1c 82 cb d8 ac 32 91 30 28 a0 88 6a 2c ac e5 fe 49 de 6a 89 06 d0 23 32 51 6d cf cc f1 08 ad 08 23 68 df 8b 4d 53 98 10 da ca c8 3b c7 02 e2 10 16 a1 6b 59 5b 23 ee 8f 3a 34 06 74 f7 04 68 c7 a3 12 64 0e 64 0a 90 08 9b 87 5f b5 89 54 7f 25 1e ee 6c 57 4a 44 52 fb 8c d4 42 f5 72 c7 8d 90 6d 6a 9c d2 52 36 a9 d8 52 c8 5e 7f 87 0e 15 3e b2 9a 4f 1c b7 60 9b ce 4a 57 03 73 78 17 ca f8 8f 9c 4e fb a8 0e 7b ee 4c ef a9 0e c4 65 f3 1c 10 14 57 23 36 40 ed Data Ascii: l6FptN@QSfzp_BSbLfw$d;' ewh$]qrSAks20(j,Ij#2Qm#hMS;kY[#:4thdd_T%lWJDRBrmjR6R^>O`JWsxN{LeW#6@
2024-04-26 04:11:54 UTC	2765	IN	Data Raw: 7f 69 08 14 82 3a 51 67 e6 58 2c b2 cb 49 8a 28 8c b5 4b 40 8d 49 39 b0 08 f5 75 a5 da a8 2e dc 9e b1 dd 0e b6 f3 b7 71 3a 35 9a 1a c2 ab e8 00 3e e1 5c e1 b9 f1 2f 55 9e 32 89 9d 6e b2 a7 52 f2 6b 89 44 e8 a0 ad 1e 60 5f a6 bb fe b0 dc 23 73 dc 0b 98 a9 dc d1 43 8f e1 c0 7c e1 27 04 e2 e6 de e9 c4 c9 04 5e 24 98 10 79 10 7f 32 a6 f5 70 29 e6 48 ec eb d0 51 4d 0c b1 ac a3 96 10 29 5d 7a 80 a9 18 0a 9b 56 d9 70 2e c9 b1 e3 6e d4 d3 00 f2 7c c2 cd 9e c4 db 20 f3 3e c1 23 b6 ca 0a 04 b8 d1 d3 26 3f 40 ab 9a c5 2b 65 33 d1 5e 3c 13 0d 8c 07 38 e0 9d 67 f5 2c 76 83 d6 6f 68 f1 15 36 7b e4 85 ec 0c ed 1f 39 fa 69 2b 07 75 74 ed 86 e2 ec 91 77 db f6 84 ca 85 ee 34 95 60 5c 45 d1 ed b3 0b ef 4c f5 89 b8 05 9d 3f 96 de 4e 45 31 73 06 77 40 e6 2e 80 f5 89 58 3e 73 Data Ascii: i:QgX,I(K@I9u.q:5>\/U2nRkD`_#sC\|'^$y2p)HQM)]zVp.n\| >#&?@+e3^<8g,voh6{9i+utw4`\EL?NE1sw@.X>s
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: c2 ce 3c 11 a9 6f 3c 96 41 6c 43 fa 81 a0 f0 13 6c 2a 6d 10 ea 95 86 37 d0 4b 5d 4d 64 35 b6 e7 3e d2 24 78 fd 06 2f fa 19 3f 9d 12 59 15 4f 83 78 8c 8a fc b4 a2 d7 c9 1b 59 29 d4 63 d3 75 6d 03 e2 79 06 77 d4 8f a4 2c 08 d4 b1 51 6c 46 74 52 2c b3 2b 27 54 8e 11 be d3 85 93 2e e8 ff 40 ef db 16 e2 b9 35 95 d7 b5 d3 bd 40 65 95 22 96 28 e3 9e 34 e0 97 15 e2 65 e7 a6 c4 66 06 29 07 bd 54 93 ee d4 d6 4e 7a f5 83 1f 22 b7 2f 6e 06 33 ee 25 03 66 57 1f 15 16 0e c4 fe e7 49 2c b6 f9 6c 74 5b 11 a3 84 ce 64 74 ec b0 6c 9c 53 86 12 40 fd 41 86 13 b8 58 09 af 7e 8c 32 b6 e8 d0 b0 e4 b4 fd eb 00 b3 44 1e f7 b5 37 3a 12 7b c4 ee b3 8d 1d 82 ec 31 54 f7 62 b1 d4 8e a1 b7 ef 71 47 51 3c 7e 40 89 cc b5 e3 76 9b 3d 9c 49 7f 8d e4 fc e1 b4 38 58 36 00 46 f5 9e 08 b6 14 Data Ascii: <o<AlCl*m7K]Md5>$x/?YOxY)cumyw,QlFtR,+'T.@5@e"(4ef)TNz"/n3%fWI,lt[dtlS@AX~2D7:{1TbqGQ<~@v=I8X6F
2024-04-26 04:11:54 UTC	1024	IN	Data Raw: 1a 0d fa 83 3d 0f 25 4c a1 29 86 41 92 a0 ff 7c b4 05 2d cd 9c 9a d7 a3 e9 98 ac cd ce fb 1c 4d e9 04 f8 7d 05 78 65 a7 b1 82 73 21 b6 c5 39 ea 32 b4 4e 79 5b d2 77 2a e4 08 03 86 c0 93 27 be 50 4c dd 73 83 0d 02 a3 45 0e dd c0 7f 2c 49 30 8b 29 84 17 72 ce 62 47 34 61 7b 89 bc 97 a4 31 c4 48 6c f7 0d 13 12 ed 89 c9 ce ce bc 46 3a 28 2c d4 08 5a 35 76 a9 52 9f b8 7f 84 51 3f 27 07 27 b8 6c 50 20 e1 8d 28 5a aa 23 9e cc ed 05 24 b6 97 4f 01 d3 f4 19 7a 48 62 ec 6c b8 14 9d 89 53 4b f2 4a e7 6a 75 59 e4 57 70 d2 9e fa bd 3d 52 55 d0 91 4a 4f de eb bc a3 99 4c fb 2a 7f 4a b7 d1 52 2c f9 00 45 2e f1 42 9c 89 6b 60 c7 b2 03 8c 9e 39 c3 8b 6d 8c 76 be 8e ef 51 8c 03 26 75 32 79 b4 44 a2 25 9c e1 1a 1c 56 c3 af 80 73 9b 46 fb 83 c1 21 b9 29 1c 3e 1a 0c 56 ab 47 Data Ascii: =%L)A\|-M}xes!92Ny[w'PLsE,I0)rbG4a{1HlF:(,Z5vRQ?''lP (Z#$OzHblSKJjuYWp=RUJOLJR,E.Bk`9mvQ&u2yD%VsF!)>VG
2024-04-26 04:11:54 UTC	16384	IN	Data Raw: e4 d7 68 f1 ad 91 fe 94 1c a8 3c 4f 42 6a ab 38 f1 0d 86 40 8f 38 75 da ee 2b 4b 75 75 7f f5 d1 46 77 0d 4b 02 bb a7 65 b4 7b ae 34 d1 3e c5 6c 11 cc 7a 2d 0c 99 af 81 f0 72 51 c7 a8 53 e2 06 c2 d8 d5 74 7a 57 45 bc c0 c0 9f cd f1 b3 24 18 74 72 fb 0c 93 83 30 15 c6 f0 1a 45 f5 08 02 71 22 41 9c 11 d9 de b1 42 08 fa c9 af fe 20 b0 82 7c aa 6c ae 57 92 13 0f 58 95 2c aa 86 46 50 47 00 26 25 de 41 c2 31 92 a5 40 81 9c c3 0f 02 6c 61 33 59 23 eb 06 3a 34 2c 5b fa 4b 79 10 8e c4 8b 2c 6b 8f 62 bf d1 05 c2 f2 70 d1 05 b8 fe 2d c1 5d 3e 0f da bd 01 ad ae 15 fb e8 1b 94 82 61 d6 97 b3 44 ca 4d 3b ae 6d c0 cd 6e 11 2d 2d 8c f3 47 ab 61 4f e6 b6 1b 0b af 5c 8b 7a b4 a1 a7 1a 96 59 a3 0e 27 0e 2b cd 23 da c5 c2 09 e1 7b 67 f9 f4 8b d7 12 63 dc f8 01 e9 00 b3 4a 57 Data Ascii: h<OBj8@8u+KuuFwKe{4>lz-rQStzWE$tr0Eq"AB \|lWX,FPG&%A1@la3Y#:4,[Ky,kbp-]>aDM;mn--GaO\zY'+#{gcJW
2024-04-26 04:11:54 UTC	5246	IN	Data Raw: 0d aa 25 6e 21 42 f4 4c 28 65 47 60 5e 96 c9 c2 50 93 4d bf 60 dd 6c 57 22 a5 36 05 aa 43 d0 af 67 2f 4f 14 49 d8 1d 67 b3 5f 05 fa 8b 30 4e 57 58 12 4b 3f 20 04 83 8e d5 19 16 49 9a 8a 89 9b 18 c2 4e b3 1b 9d 72 ad 2b 71 d6 98 d6 ff 70 7f 2c 05 90 0c 46 dc 1b 27 09 2b 14 28 dc a4 a2 0b 72 4f 2a 79 61 2e 63 ae b2 ac f4 a5 c2 70 9d 0a b3 40 c3 95 22 85 8a 50 09 ad 57 eb 7a 10 22 ab a1 ba 71 61 ab 34 ad cb f5 30 78 3b c2 69 8d 2d 23 bb 2d 1e bf 4f 6c e5 0c 1b cd d8 d9 b5 67 28 fa ec 4a d3 77 37 03 ad 42 3b c0 9f 8b 17 90 33 97 51 b5 98 1e 35 08 32 eb bc 9c 30 c0 17 e4 d5 65 51 dd 2c 5a 2d 60 ad ac 0a bd 20 07 f1 98 4d 19 23 b2 1d dc 2e 5e ba 93 5e 21 8f 0e 80 e8 1b 7c 6d b9 56 a0 44 60 0a e8 3b f7 ee ee e0 f1 c1 93 28 3b cc e1 9f 41 fe 34 ca e4 e7 de de 20 Data Ascii: %n!BL(eG`^PM`lW"6Cg/OIg_0NWXK? INr+qp,F'+(rO*ya.cp@"PWz"qa40x;i-#-Olg(Jw7B;3Q520eQ,Z-` M#.^^!\|mVD`;(;A4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49943	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:53 UTC	678	OUT	GET /recaptcha/enterprise.js?render=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:53 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 04:11:53 GMT Date: Fri, 26 Apr 2024 04:11:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:11:53 UTC	727	IN	Data Raw: 35 37 64 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 57d/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-04-26 04:11:53 UTC	685	IN	Data Raw: 6d 43 41 4c 53 45 55 32 39 79 51 46 57 38 64 65 50 5a 37 78 51 54 76 53 74 37 33 70 48 61 7a 4c 46 54 4b 35 66 37 53 79 4c 55 4a 53 6f 32 75 4b 4c 65 73 45 74 45 61 39 61 55 59 63 67 4d 41 41 41 43 50 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 Data Ascii: mCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1
2024-04-26 04:11:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49950	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:54 UTC	728	OUT	GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-light.woff2?1713982826 HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:55 UTC	805	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 32604 Connection: close Date: Wed, 24 Apr 2024 21:01:43 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:59 GMT ETag: "b61b564a07d65d68488de3231bd0ac7b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: aDab.8XVbT3LN21VOOr9r7JocxvOHguu Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1d70b90303ff56b86662db87683a2a04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: mheupMN6SGHozg98FEjqX217L_HZ8ncGki2165paUyiP4EhQTpqLvw== Age: 112212
2024-04-26 04:11:55 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7f 5c 00 13 00 00 00 01 69 74 00 00 7e ef 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b ec 7a 1c 93 4a 06 60 00 88 36 08 1a 09 82 73 11 08 0a 84 85 4c 83 cf 45 01 36 02 24 03 8f 60 0b 87 72 00 04 20 05 89 36 07 99 75 0c 72 3f 77 65 62 66 06 5b 26 49 71 03 39 77 5f a0 96 ee 04 f1 52 fb 67 d5 2b 15 c8 cd 33 a5 37 eb 4c 91 e1 fe f0 1a b6 bb 19 dc 4d 14 15 63 19 99 fd ff ff a7 26 15 19 33 cd 30 69 27 c8 50 94 ab fc 87 4c 64 b3 34 2c 21 1d 1c c5 ca e8 09 c7 ab 63 4f 38 ce ae a5 77 dc e8 9a 75 0d 0e 35 fd 68 de 92 4a 75 d7 43 d8 57 aa 27 7b f9 60 42 26 71 52 3d 1a ee e1 27 e6 82 b5 e2 b2 6f 1d ef 50 48 a6 32 59 73 67 36 15 06 ad f0 86 f4 f9 16 76 72 7e a9 d4 59 5a 2c 4d ad f6 7b Data Ascii: wOF2\it~?FFTMZzJ`6sLE6$`r 6ur?webf[&Iq9w_Rg+37LMc&30i'PLd4,!cO8wu5hJuCW'{`B&qR='oPH2Ysg6vr~YZ,M{
2024-04-26 04:11:55 UTC	16220	IN	Data Raw: c9 98 97 d8 f8 03 b6 1e b8 b6 a5 c7 01 f7 61 4c 1e f3 30 5a 1a a0 a9 4c 4e 8c 1f 68 5b 5c 3e cf 1e 85 c5 a3 3e 4e 51 4a 64 77 0c fd a9 b9 c0 73 5b 0a d7 cc ce 2b 80 d8 0c 03 6c 81 f5 01 a3 94 ca a5 16 18 0b d6 ef a0 a3 70 a9 61 c5 aa f5 ab ae 64 54 8c 1f 39 01 b9 a2 3b c7 e0 a8 ef c3 9b 46 8d e6 b4 13 c9 75 47 80 91 8d 47 16 b3 21 d0 59 08 d8 d9 ed 8a 0e 17 92 2c 27 26 bf 1c 5f 4f c3 f2 fa 0c 30 4e c2 c5 df e6 91 20 a6 b0 92 aa c5 28 72 1b 25 46 d3 51 af 62 d0 41 d3 74 0d fb 57 ae 02 27 87 38 f2 f6 d8 12 c0 7f 63 b8 f2 92 e9 9a 94 68 7d f4 d6 0c 80 81 5b 35 fa fd ed d5 c9 6c fb 92 df 2a e7 bd 9d 5a 51 38 79 33 74 77 1a b5 e1 57 f8 db 93 a2 e7 c9 73 e3 4f 37 c9 cf 8b 62 75 8b bf 48 f3 86 9a 3f 3a fc 87 b2 94 f3 f3 d7 e8 aa c2 33 e5 66 47 71 b1 a6 52 e3 85 Data Ascii: aL0ZLNh[\>>NQJdws[+lpadT9;FuGG!Y,'&_O0N (r%FQbAtW'8ch}[5l*ZQ8y3twWsO7buH?:3fGqR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49951	34.120.195.249	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	690	OUT	POST /api/1224658/envelope/?sentry_key=9137ea8d795940958d24a85e9a579e3c&sentry_version=7 HTTP/1.1 Host: o160250.ingest.sentry.io Connection: keep-alive Content-Length: 432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:56 UTC	432	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 34 3a 31 31 3a 35 34 2e 35 37 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 2e 31 39 2e 37 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 34 36 32 38 31 66 32 39 34 35 66 31 34 35 66 32 62 37 61 34 30 66 65 35 32 35 30 63 38 65 65 38 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 34 3a 31 31 3a 35 34 2e 35 37 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 34 3a 31 31 3a 35 34 2e 35 37 37 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-04-26T04:11:54.577Z","sdk":{"name":"sentry.javascript.browser","version":"6.19.7"}}{"type":"session"}{"sid":"46281f2945f145f2b7a40fe5250c8ee8","init":true,"started":"2024-04-26T04:11:54.577Z","timestamp":"2024-04-26T04:11:54.577Z","stat
2024-04-26 04:11:56 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:11:56 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49953	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1141	OUT	GET /mp/status HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Allow-Cookies: no consent data sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Block-Cookies: true Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 X-SPELEO-TRACE-ID: uwyVqdrtzmgzg X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:56 UTC	1342	IN	HTTP/1.1 401 Unauthorized Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2 Connection: close CF-Ray: 87a3bb4d18e7b3b6-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf;Version=1;Domain=squareup.com;Path=/;Max-Age=31536000;Secure;HttpOnly;SameSite=lax;Expires=Sat, 26 Apr 2025 04:11:56 GMT;Category=C0001 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct content-security-policy: object-src 'none'; base-uri 'none'; script-src 'nonce-AKLY+UE8r3Mymsgvn+A0zQ0=' 'unsafe-inline' 'strict-dynamic' https: http: 'report-sample'; report-uri https://sentry.io/api/1474740/security/?sentry_key=f510e74496ac409fb59c50c52d7822da frame-options: SAMEORIGIN Set-Cookie: _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A;Version=1;Domain=squareup.com;Path=/;Max-Age=31536000;Secure;SameSite=lax;Expires=Sat, 26 Apr 2025 04:11:56 GMT;Category=C0001
2024-04-26 04:11:56 UTC	335	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 71 75 61 72 65 47 65 6f 3d 44 45 4c 45 54 45 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 20 53 65 63 75 72 65 3b 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 71 75 61 72 65 47 65 6f 3d 55 53 2d 46 4c 3b 20 44 6f 6d 61 69 6e 3d 73 71 75 61 72 65 75 70 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 20 53 65 63 75 72 65 3b 20 6d 61 78 2d 61 67 65 3d 32 34 31 39 32 30 30 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 2f 6d 70 2f 73 74 61 74 75 73 2f 2a 2a 0d 0a 78 2d 66 72 Data Ascii: Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-envoy-decorator-operation: /mp/status/**x-fr
2024-04-26 04:11:56 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49954	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	593	OUT	GET /builds/149f9b9/assets/chunk.122.426e8f84698648d4843b.js HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:56 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 131730 Connection: close Date: Fri, 26 Apr 2024 04:11:57 GMT Last-Modified: Wed, 24 Apr 2024 18:33:04 GMT ETag: "c6b909f7047209a484d5943745c524a6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: 0HX2n72bIFdemETx58grkCUXNY1o7uL7 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f4771d04154f83e40dc607e403d2dbe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: PDEvyn_en0-iCGUMk7tVYDISaX6fPl4ReH3lqUlM6Nx8_67VtU29kQ== Vary: Origin
2024-04-26 04:11:56 UTC	15688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 0d 5b db 38 b3 30 fc 57 82 4f 97 b5 1b 25 24 04 28 24 78 f3 d0 42 77 d9 7e d0 6d a1 7b ef 86 94 c7 24 0e b8 04 3b b5 9d 52 4a 72 ff f6 77 3e 24 59 76 1c a0 f7 7d ce 79 cf 73 5d 67 3f 88 25 8d 34 d2 48 1a 8d 46 a3 91 7d 13 84 c3 e8 a6 7e e3 9f 4f bc c1 d5 ef 49 14 4e ce fc eb 73 3f 3e f3 a6 69 74 16 5c 4f a2 38 3d 73 1f 07 36 9b f5 fa 4e 7d 32 4d 2e ed 5e af b9 be de 17 77 9b cd 8d f6 68 1a 0e d2 20 0a 6d 5f a4 22 76 ee 54 b8 42 31 ce dd 57 2f ae c4 ee d1 f9 67 7f 90 d6 af fc db c4 f6 9d 4e 30 b2 65 cc 85 9f 1e dd 84 ef e2 68 e2 c7 e9 ed 87 db eb f3 68 9c 70 ae d0 bd 0f 06 8b 49 57 57 ed d0 0d eb a3 60 9c fa b1 6d eb ba 00 de d8 4f a7 71 58 29 2d 62 df 4f 06 71 30 49 a3 98 ea 58 f7 c3 e9 b5 1f 7b e7 63 7f ee 38 8e 88 a9 Data Ascii: [80WO%$($xBw~m{$;RJrw>$Yv}ys]g?%4HF}~OINs?>it\O8=s6N}2M.^wh m_"vTB1W/gN0ehhpIWW`mOqX)-bOq0IX{c8
2024-04-26 04:11:56 UTC	1647	IN	Data Raw: 86 77 79 a1 0a 6b 9f 68 1c d5 a8 5f f9 ef 9a 71 2d ef 24 13 d3 c4 b7 ac 7c bc 67 61 ac 07 7a e6 c7 f4 94 e1 0a 08 6a c6 e9 de 0d ae 2e d9 52 62 64 5c 49 f5 8e 50 4d 49 5d c7 2c 29 f3 e5 44 47 af 68 87 2e 63 de 46 21 b1 b1 cc 04 5a 79 a8 d0 2f c0 bd 46 84 d9 5a 43 fe b5 f6 43 3b 80 4a 74 f1 c4 d4 3d 82 80 d3 b6 f3 f5 0d 50 7b cf 2c 47 45 e0 d6 9e b2 a1 d5 7c b1 02 b8 bc aa 47 84 8b 69 c5 3a a9 78 b4 74 24 62 b4 73 98 96 90 aa 52 d6 90 7c a5 43 d8 9a d1 85 e3 f6 7e a8 2e 1e e3 13 04 d8 c4 d0 e1 7a 4b 8c e9 9c 6c 41 3e 43 8f 66 4b 62 e7 33 39 78 f9 96 3f b6 43 38 34 03 45 0f 5f 29 ba c5 53 82 86 cd ce 41 7a 74 5f 1f 1f 86 b6 9d 3e af 90 f5 51 e0 8f 87 24 db 95 d9 77 90 54 e9 fa 99 6b 33 87 1e b6 a4 27 79 b3 5e 07 90 01 5d 90 ae 7f 8e 82 90 10 3b f2 66 7b 34 Data Ascii: wykh_q-$\|gazj.Rbd\IPMI],)DGh.cF!Zy/FZCC;Jt=P{,GE\|Gi:xt$bsR\|C~.zKlA>CfKb39x?C84E_)SAzt_>Q$wTk3'y^];f{4
2024-04-26 04:11:56 UTC	394	IN	Data Raw: 43 ef 16 df 87 d1 aa 20 2e 06 5f b2 87 8c f9 2d fc 0a 3f e9 61 da d9 e3 91 41 37 7f 8c f1 12 20 ff f2 bd d8 76 6a 7e 3e 6c 8e 0b ef ab 97 e6 fd c3 1a 15 53 75 50 c8 49 7d 6b 71 16 6c 36 87 27 97 b0 be 9c c4 e3 2c 86 21 28 8a 90 c0 be 25 28 d2 f6 41 34 2a 53 56 ec e7 e8 fc 38 48 c7 8a 4b a8 1e 5d 58 61 55 02 3a ea 08 eb 37 fe 79 42 36 f3 a8 f9 d4 30 32 36 07 82 6b 35 69 6c cb a1 a0 9d 61 b1 18 8a 33 92 17 8b 30 20 bc e1 30 f6 93 45 89 40 c6 33 10 ec 4f 87 78 3f a0 00 c3 d1 0c a2 c6 cb 02 90 4a 40 cf 26 a1 7d a1 a4 80 97 a1 7b 61 48 01 2f ef 91 02 a0 a0 c1 15 88 00 2f a5 08 a0 61 31 06 2d ab d3 4c 1a a6 20 a0 82 14 da 89 65 d5 31 64 52 69 af 8a 40 f8 54 d1 45 64 4a 4e a6 ec 2a 13 19 34 18 96 02 e1 3e 1f 93 21 6a 08 fb aa e5 bb 8c c5 ac 32 cb 59 70 9f 90 ad Data Ascii: C ._-?aA7 vj~>lSuPI}kql6',!(%(A4SV8HK]XaU:7yB6026k5ila30 0E@3Ox?J@&}{aH//a1-L e1dRi@TEdJN4>!j2Yp
2024-04-26 04:11:56 UTC	1024	IN	Data Raw: 00 10 cf 00 79 9e 6f 40 48 9e 4f 13 97 94 9a a5 d3 8e 54 98 84 28 4a f1 66 54 19 2a 4c 61 a0 d8 9f 80 c4 5b 0a c5 49 92 b7 d1 98 29 e7 6c 94 c4 60 c9 65 30 99 90 61 77 19 05 64 22 83 0e 83 84 d4 79 a5 a0 2a 31 5f ea 1b 3f bd 8c 7e a0 63 55 be b3 6b ca 78 4f 17 e6 31 e4 67 f9 8f 62 55 33 fd 41 a4 b9 f2 25 ce 9c a0 56 46 18 53 2e a3 4a 8e bd 72 48 4c 90 e4 9b 9e cb a1 50 14 8d 95 2c 96 d3 59 58 0a de ca ed 1f 28 4a 0b 97 31 2e 8e 53 73 33 81 07 a7 5d db 04 85 fd aa 12 92 61 6c cb 0d 6c cd 45 7f 73 32 5a 91 bd 2c 4d 0d 01 99 56 75 c9 d3 92 d3 6e e8 a5 0b 97 b2 64 b9 bc af 5b 94 5d 59 96 82 97 cc ba 70 ac 4b 5b 5b 74 fb 07 e5 7f 99 7a 61 1a a4 b7 8b fd ae 0f 70 0d 24 64 0e a0 f3 cc 66 4d 66 df d3 38 f6 c3 c1 0f 95 a1 f2 cc 66 d6 c9 87 7d 4b b2 cd 91 0f b1 25 Data Ascii: yo@HOT(JfTLa[I)l`e0awd"y1_?~cUkxO1gbU3A%VFS.JrHLP,YX(J1.Ss3]allEs2Z,MVund[]YpK[[tzap$dfMf8f}K%
2024-04-26 04:11:56 UTC	16384	IN	Data Raw: b3 98 b4 37 1e ab d4 a4 24 f9 3e ba a2 11 cb 23 68 da 70 5d dd 9a c2 93 65 c5 ec f2 75 49 73 41 5c 20 3a dd f9 88 cd 12 30 a6 b9 1c 49 ee b5 c9 62 69 8c 4f 1b 00 94 5d 97 83 d2 ed d0 a5 bb 71 fc 20 36 b9 01 c2 83 a2 bb 58 3e 58 6d 07 a2 a9 ee f1 48 ac fc 16 3c 17 53 78 f1 b2 b4 0e f9 6e f4 af 83 3c a7 7c 04 a1 3b 99 ff 74 de 39 17 09 52 6b 6a db 87 c5 3a 84 6e b3 13 ee 16 b3 74 42 20 00 2c f2 b5 66 3f a3 2f ac f9 e4 2e 0f 5f 2e 69 68 ac 01 4a 18 b1 7c 4b a0 81 ce 64 65 09 bb 41 a7 0a 32 05 be 12 6d 8e f0 34 db e9 2d 34 7f ac 47 64 c9 6a f1 98 31 b7 7c be e6 11 5d 7a c9 eb 7b 70 ad ac f0 29 ad 02 81 14 e5 e9 0b af 41 fc 76 df 2d d1 3f 42 b7 f7 28 03 7e 7f c9 bc 9f 8b fb b2 a7 ff 6e fe dc 3d cc 7f b1 04 7c 5e ee df 2f c3 78 ab fe df 2a 45 78 0f 97 d3 17 7f Data Ascii: 7$>#hp]euIsA\ :0IbiO]q 6X>XmH<Sxn<\|;t9Rkj:ntB ,f?/._.ihJ\|KdeA2m4-4Gdj1\|]z{p)Av-?B(~n=\|^/x*Ex
2024-04-26 04:11:56 UTC	1024	IN	Data Raw: cd bb db ef 4e d1 df f0 06 03 9a 54 98 12 68 13 f4 9f d5 b2 c3 16 51 3b 4d 38 39 a2 18 1d 04 8b 56 b7 a9 2a ea 12 76 87 08 a4 59 ec c3 91 a2 d1 5b ca 7c bf 78 28 14 d4 20 17 a6 09 f4 cb 46 f4 41 e9 b0 ae 61 4d 1a 53 1d 19 c6 1e 06 56 74 b1 88 1c bd f0 3c eb fe 03 7a d6 41 df 5f 2c c0 00 74 b4 c8 56 aa b2 b6 19 d7 86 e2 cc eb 08 34 80 7d bb 0a db 6d bf e7 5e 4f bc b5 f6 a0 b9 ff fc ef ff eb ff f9 cf ff f6 9f ff 1d da e4 1e 92 7f ba fb a4 7b f7 51 af 2e b3 fb d3 ff fa bf 31 a3 9b cc b0 ff 3d 8f 66 02 d5 07 ae ea b2 5f 69 5c 0d 93 d5 8d f3 1c 78 6b a4 00 69 34 97 88 b4 74 5d 8f 82 6e d6 e2 18 95 62 b4 96 1e 3b 71 4b 84 b8 83 53 fd 22 f2 78 20 4e 45 78 e2 7a 02 37 ba 49 12 9c 85 66 e4 6d e0 2d 13 80 4c d7 cb f3 75 3e 0d 75 5f d0 0b ad eb e9 37 13 ab 87 95 ea Data Ascii: NThQ;M89V*vY[\|x( FAaMSVt<zA_,tV4}m^O{Q.1=f_i\xki4t]nb;qKS"x NExz7Ifm-Lu>u_7
2024-04-26 04:11:56 UTC	16384	IN	Data Raw: d8 7f b9 65 13 c1 90 87 7b 64 c2 43 0c 0c 4b 92 ca 23 7c 82 42 42 d1 67 bd 0c 89 1d 61 59 f6 77 f7 7a fd ad 08 f6 33 bb ef d7 f5 5e b7 bf b3 e5 1a 4c 12 c9 de 22 2e 92 34 2c 9d 67 73 01 30 db 6d be 38 32 0d b6 32 4a 8f a4 f5 5a 68 f7 fa f7 b9 db 59 0c 11 7f d0 e7 e1 3a 61 03 48 3f f1 83 40 dc 79 66 b6 8f 46 44 18 a3 27 93 96 8f 2f 3d 8c 61 4d d6 42 7a 64 bb 92 e3 50 6c 23 db 70 bc 46 18 35 97 03 65 bf b7 7b b0 7b 7f 67 7f f7 60 53 73 3a 6b ca 38 42 af 19 d9 e1 1c 76 17 c0 32 e3 57 96 76 d4 22 a9 df bc 1d 1e 1d 7b ba 5e 54 d7 4e 8c ed a5 a0 48 df 63 34 26 4e 92 be bd f0 63 00 8b 4b 0b 68 d7 65 96 36 42 df 9f 26 8d cb 60 ea a3 5e 46 ea 9f f9 71 c2 54 b8 c9 67 11 f7 cd 9a b4 6c 6c c4 b8 b7 84 99 9a 9b 75 d3 82 1a 25 bc af 87 d0 d5 a2 2b 87 ad 56 f2 6f e9 08 Data Ascii: e{dCK#\|BBgaYwz3^L".4,gs0m822JZhY:aH?@yfFD'/=aMBzdPl#pF5e{{g`Ss:k8Bv2Wv"{^TNHc4&NcKhe6B&`^FqTgllu%+Vo
2024-04-26 04:11:56 UTC	1024	IN	Data Raw: 91 55 92 7f 23 00 cd 2f b4 b2 71 55 b2 ef 63 84 cd f6 c8 e9 ef a7 90 37 b5 e2 8b 14 ed 09 fa dd a7 30 03 9e a6 97 7b 7b 6e 77 51 bc c3 0c de db 73 fa f2 17 17 be 0c e4 0f 1d c0 34 f0 35 2f 26 32 0d 2f 22 90 e6 2f 80 49 c1 16 20 87 bd e9 58 db d4 a5 59 fc c1 74 6d 5c 56 a4 8c 94 72 33 8d 95 e2 45 8e 5e b9 aa 7a d7 05 a6 d4 df 71 77 7b 36 06 10 0c a8 e3 dc 90 c2 af 74 1a 19 42 cc 3a 1d a3 16 de c2 c8 72 5e 78 11 5c a2 0e 1e cb c4 b0 5b 18 0d da 3c 39 c5 d0 73 cd ce e5 6f f8 33 60 3f 00 10 fb 05 66 43 c5 53 c0 cb 22 85 d9 d2 71 46 31 05 1c c3 5d c6 85 53 10 cd 18 5e 81 7e e7 f0 03 dc 67 0a 3f 5d 8c 88 d3 c6 86 66 d0 d0 4c 68 a9 a5 ee cf b6 71 51 b9 f3 e2 bd bd de 22 86 da dd 9d 51 30 14 2a c3 1b a6 29 ac b5 87 4c 0b 9d d6 c7 bf fd bf 69 7d ce 62 9f d6 02 d2 Data Ascii: U#/qUc70{{nwQs45/&2/"/I XYtm\Vr3E^zqw{6tB:r^x\[<9so3`?fCS"qF1]S^~g?]fLhqQ"Q0*)Li}b
2024-04-26 04:11:57 UTC	16384	IN	Data Raw: 9d 7c a7 94 32 b8 d5 cb 59 16 27 68 9c 52 ae 34 4b fc 30 4b 8d e5 d2 7e 13 99 3f d9 df 83 34 fa 93 24 58 85 13 dd b1 e2 f7 a1 92 85 9f 17 51 f8 34 29 36 7a a9 22 04 fd e6 93 57 e5 b6 09 92 93 e0 b5 68 5b 1b 4e 4c 64 b4 f4 5c 74 98 19 47 89 a0 8e 51 bd 2e c2 3b 02 3f f5 28 10 63 88 21 f8 e0 8d 85 65 34 72 6b 88 ab f7 61 1a f2 53 e9 50 9b 00 25 32 3c dc 49 bc ef 42 ea 47 8b e1 05 e0 48 60 fc b6 02 95 05 31 a0 4e 26 b5 30 ad 25 c1 1f f3 10 6f a8 84 51 ed 2d 5a ca 55 fb cc a2 3c 9b 04 5e bd 1e 6c 79 d1 62 81 a1 55 b3 55 b0 84 68 43 85 50 e4 a9 27 13 ea 38 86 41 d6 f5 2a 3b a8 64 0f 58 c4 3a 44 66 00 3d c8 74 3d 40 b4 6e de 87 f2 78 64 cc f8 19 68 f8 7a 7e 6b 1a 22 67 ed cb d8 e6 ff 1b 36 1b 64 5b 46 a9 78 4d fd f7 14 98 51 a6 92 a2 76 dd 31 6f 39 32 72 2e c2 Data Ascii: \|2Y'hR4K0K~?4$XQ4)6z"Wh[NLd\tGQ.;?(c!e4rkaSP%2<IBGH`1N&0%oQ-ZU<^lybUUhCP'8A*;dX:Df=t=@nxdhz~k"g6d[FxMQv1o92r.
2024-04-26 04:11:57 UTC	16384	IN	Data Raw: 57 aa bf 7c e3 03 af bd 9a e4 fc 41 64 5b 2c dc ae f2 da 71 a5 57 2b 8f b2 30 5a a5 32 5d 77 d3 25 2b dd 74 11 9e c3 b4 35 65 fa 4b 2a 99 85 4e b5 60 89 46 1f 44 9c 93 29 3b 01 ea 4e c8 fb 11 f2 0e 84 74 28 12 a2 bb 7e 97 df 6a 09 73 90 e8 4e b4 b4 97 5f ea db 5d 2c 54 f4 aa b8 1f c8 b8 d6 2a 77 61 1c 55 ed 6e e2 91 47 97 0b 66 5b c9 ac 1b d8 e1 1e 29 ce 2f 73 4f 2f 6c d5 10 97 d1 84 38 f9 c1 c3 05 45 56 a9 6e 89 d8 5f 9c 0c f1 04 92 d3 e1 55 f0 71 e6 47 93 ef 82 b2 b0 c5 c9 59 cc 2c 7b 4a f1 2a 8b a9 78 c5 ae 75 31 95 d8 2c b0 61 19 31 0e 8f cf 9a 74 2d a6 74 a7 06 0d fc ad 3c 07 19 d3 97 73 8c af c7 52 8e af 34 75 8c 6f a4 3a 5e eb 72 c4 72 0e c2 57 a5 8e 2c 29 72 d0 21 44 39 07 2c b3 5c bd 7e 63 27 37 76 74 63 fb 37 76 7c 63 a7 37 78 99 72 7c e3 75 47 Data Ascii: W\|Ad[,qW+0Z2]w%+t5eKN`FD);Nt(~jsN_],TwaUnGf[)/sO/l8EVn_UqGY,{J*xu1,a1t-t<sR4uo:^rrW,)r!D9,\~c'7vtc7v\|c7xr\|uG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49955	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1136	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: gGlWWeOpWqNwm sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:56 UTC	69	OUT	Data Raw: 0a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 18 c8 06 20 01 Data Ascii: $f4d668d2-779c-4df7-a4fc-07c00f1a3adeonboarding-cbd-migration
2024-04-26 04:11:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb4d8bd2748d-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:56 UTC	79	IN	Data Raw: 34 39 0d 0a 08 01 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 1a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 28 c8 06 38 01 40 01 0d 0a Data Ascii: 49onboarding-cbd-migration$f4d668d2-779c-4df7-a4fc-07c00f1a3ade(8@
2024-04-26 04:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49956	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1136	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: OKLBltvNUfFUc sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:56 UTC	69	OUT	Data Raw: 0a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 18 c8 06 20 01 Data Ascii: $f4d668d2-779c-4df7-a4fc-07c00f1a3adeonboarding-cbd-migration
2024-04-26 04:11:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb4db81d74a0-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:56 UTC	79	IN	Data Raw: 34 39 0d 0a 08 01 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 1a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 28 c8 06 38 01 40 01 0d 0a Data Ascii: 49onboarding-cbd-migration$f4d668d2-779c-4df7-a4fc-07c00f1a3ade(8@
2024-04-26 04:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49957	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1136	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: mHgXRUmCGZmUu sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:56 UTC	69	OUT	Data Raw: 0a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 18 c8 06 20 01 Data Ascii: $f4d668d2-779c-4df7-a4fc-07c00f1a3adeonboarding-cbd-migration
2024-04-26 04:11:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb4dba9cdad5-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:56 UTC	79	IN	Data Raw: 34 39 0d 0a 08 01 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 1a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 28 c8 06 38 01 40 01 0d 0a Data Ascii: 49onboarding-cbd-migration$f4d668d2-779c-4df7-a4fc-07c00f1a3ade(8@
2024-04-26 04:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49958	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1232	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: EKCBYeuhQQotF sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
2024-04-26 04:11:56 UTC	69	OUT	Data Raw: 0a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 18 c8 06 20 01 Data Ascii: $f4d668d2-779c-4df7-a4fc-07c00f1a3adeonboarding-cbd-migration
2024-04-26 04:11:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb4cab9e5c6b-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:56 UTC	79	IN	Data Raw: 34 39 0d 0a 08 01 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 1a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 28 c8 06 38 01 40 01 0d 0a Data Ascii: 49onboarding-cbd-migration$f4d668d2-779c-4df7-a4fc-07c00f1a3ade(8@
2024-04-26 04:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49959	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1232	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: ofOqwftUkiQRo sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
2024-04-26 04:11:56 UTC	69	OUT	Data Raw: 0a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 18 c8 06 20 01 Data Ascii: $f4d668d2-779c-4df7-a4fc-07c00f1a3adeonboarding-cbd-migration
2024-04-26 04:11:56 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:56 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb4ced1c220f-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:56 UTC	79	IN	Data Raw: 34 39 0d 0a 08 01 12 18 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 62 64 2d 6d 69 67 72 61 74 69 6f 6e 1a 24 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 28 c8 06 38 01 40 01 0d 0a Data Ascii: 49onboarding-cbd-migration$f4d668d2-779c-4df7-a4fc-07c00f1a3ade(8@
2024-04-26 04:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49960	13.226.52.56	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	540	OUT	GET /martech.js HTTP/1.1 Host: martech-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9338 Connection: close Date: Fri, 26 Apr 2024 04:11:57 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 21 Feb 2024 18:04:15 GMT ETag: "a6a19c076ef98c1e741ddf2a605d338a" x-amz-server-side-encryption: AES256 x-amz-version-id: C5wZH._o9c.nQNuQl6mD91pAJdLtpnPu Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5a334f8291e38975c678834100b052f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: OljJ4yafc8HoPqEY0K9vGVYUhzxGcd71giVrh55WOPqK1DpJrkuP-g==
2024-04-26 04:11:57 UTC	9338	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 46 6f 72 4f 66 49 74 65 72 61 74 6f 72 48 65 6c 70 65 72 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 61 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 63 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 28 63 3d 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 61 29 29 7c 7c 62 26 26 61 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 7b 63 26 26 28 61 3d 63 29 3b 76 61 72 20 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 Data Ascii: "use strict";function _createForOfIteratorHelper(a,b){var c="undefined"!=typeof Symbol&&a[Symbol.iterator]\|\|a["@@iterator"];if(!c){if(Array.isArray(a)\|\|(c=_unsupportedIterableToArray(a))\|\|b&&a&&"number"==typeof a.length){c&&(a=c);var d=0,e=function(){};re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49963	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	618	OUT	GET /builds/149f9b9/assets/images/ecom/weebly_by_square.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	819	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3889 Connection: close Date: Fri, 26 Apr 2024 04:11:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "c837a388b8a10d82f2b913eab8400b54" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: Aw4BMEpTpupME38h1D766i9S1ruwB3Zk Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fae059afbeac18143c8bf2780b8d7052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: j3bdTHGh1hJgWpG8378H_lizOxLjzLdEqubcxTzFor_vpwKBafZo_g==
2024-04-26 04:11:57 UTC	3889	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 65 5a 3d 93 1c b7 11 cd f5 2b a6 4e 89 1d 78 08 34 be 5d 3a 05 9a 64 83 dd 2a 47 1b 5c e6 32 4f 24 ab 68 4a 25 51 a2 7e be df 6b a0 81 d9 73 c2 e3 1b 00 8d 46 37 fa 13 fb c3 ef 7f 7e d8 be 7d 7a ff f5 e3 f3 93 97 f2 b4 7d 7c fd f4 e1 e3 d7 e7 a7 28 4f db 9f 9f 5e bf fd f4 cb 5f cf 4f 6e 73 1b 46 37 7e fc f9 d3 e7 cf cf 4f 5f 7e f9 f2 fa b4 fd f5 df cf 5f 7e 7f 7e fa f8 f5 eb af ff 7c f7 ee db b7 6f fb b7 b0 ff f2 db 87 77 e2 9c 7b 07 d2 4f 3f 7e f7 c3 87 ed 3f 9f 3f fd fa 8f 5f ff cd 3d fe f8 ed f3 df be 27 76 7f e7 18 3f 2a c5 7f fc f6 c7 e7 d7 e7 a7 d7 3f 5f bf fc f2 fe fd 53 5f f2 e6 db fb e7 a7 5b 29 7b 8d b5 6e ee 5e f7 d2 6a cd 47 a9 7b 6b 6d 2b 7b 48 a5 f8 ad ba bd e4 12 b6 bc a7 dc 88 65 af a5 19 3c 2a e6 d5 2a 73 b8 Data Ascii: eZ=+Nx4]:dG\2O$hJ%Q~ksF7~}z}\|(O^_OnsF7~O_~_~~\|ow{O?~??_='v??_S_[){n^jG{km+{He<**s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49964	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	625	OUT	GET /builds/149f9b9/assets/images/public-web-styles/ui/spinner.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 382 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "08dc65281c3db6670b9435f5eacf9ca6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: 8mNCAEeiNHxjoIHEXih9tjbeo6qaHp5L Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6bcc5cb16e0756268a257daab0f6082c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 9OByAbiiQtSQF1n013T-H3EdkEwJRB7Oc0vN5RqDTj0tZKZ2ma9lOg==
2024-04-26 04:11:57 UTC	382	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 93 5d 4f 83 30 14 86 ef f7 2b 9a ee 46 93 ae b4 25 8c 39 61 17 2e d1 2b e3 85 d9 f5 42 b6 0e 9a 54 20 b4 0e f0 d7 7b 5a 98 99 8b 89 1f 37 02 fd e0 ed 39 e7 a5 7d 42 62 8e 39 ea 5e 74 69 52 5c 58 5b 2f 83 a0 6d 5b da 86 b4 6a f2 40 30 c6 02 88 c0 e8 a8 64 7b 57 75 29 66 88 a1 38 82 07 a3 56 ed 6d 91 62 37 2d a4 ca 0b eb e7 ab 09 42 89 56 a5 cc 9a 87 26 db 2b 59 5a a4 f6 29 36 b5 2a 4b d9 6c b5 8b dc 72 8c f2 71 75 53 2a 0b ee af 46 36 cf 75 b6 93 4f e5 c6 48 8c 3a 0e 66 18 f5 30 44 73 2a c0 a4 13 83 59 2f 4e 92 f3 02 37 63 ab 1a 55 87 83 91 d6 e7 18 db 6b 09 8e 20 cf 76 95 ae 9a e5 f4 de 5f b7 5e aa c0 45 d9 7e c9 28 14 0b be aa c1 7f 5e 63 ac 90 04 9f b7 ec b5 3a b3 05 3a 28 ad 61 77 8d be 9a 5e 1c c1 35 46 70 2e 8f 61 4c Data Ascii: ]O0+F%9a.+BT {Z79}Bb9^tiR\X[/m[j@0d{Wu)f8Vmb7-BV&+YZ)6KlrquSF6uOH:f0Ds*Y/N7cUk v_^E~(^c::(aw^5Fp.aL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49965	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	613	OUT	GET /builds/149f9b9/assets/images/vector/checkmark.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 449 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:59 GMT ETag: "e58b413cfa1e5d5c0bbbed01743f7e11" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: zs83036Y6g0RB8s7ErNOfi9z4FqDSTFE Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f0d2db130f25377126d8fc517e82fa4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: jF2rgjMoygHVxvARAc5a1oJp__MIujcVD4tWrlfLGsP1kJRkWGIowA==
2024-04-26 04:11:57 UTC	449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 52 cb 6e 9c 30 14 dd e7 2b 6e 9d 4d 2b 8d b1 81 0c 8f 11 10 29 23 a5 9b 46 8a 94 66 d3 1d 01 07 dc 61 6c 04 ce 30 f9 fb 5e 0c a4 64 14 64 71 1f e7 dc 87 8f 9c dc 9e 8f 0d 9c 44 d7 4b ad 52 e2 3a 9c 80 50 85 2e a5 aa 52 f2 fc fb 9e 46 e4 36 bb 4a fa 53 05 83 2c 4d 9d 92 30 6a cf 04 6a 21 ab da 2c d1 49 8a e1 4e 9f 53 42 3d c0 13 b9 78 c8 ba 2d 46 38 48 f5 29 a9 8d 69 77 8c 0d c3 e0 0c be a3 bb 8a 79 9c 73 86 03 66 ca ee dc 48 75 f8 8a e8 c6 71 cc 2c 4a b2 2b c0 2f f9 46 29 fc 14 4a 74 b9 d1 dd 0e 9e 0e c2 14 35 dc 78 f0 dd 0f c2 c8 fd 01 14 56 6d 5e 74 2d 8e 32 9f af e7 14 fa c8 fa a9 82 d2 b9 a1 91 a6 11 59 51 8b e2 90 b0 29 98 80 52 f4 45 b6 ef 44 6e 44 89 4a 98 7a 1e e6 24 cc 42 0b eb b5 cf c6 0c 9a 29 53 81 2c 53 f2 f4 Data Ascii: mRn0+nM+)#Ffal0^ddqDKR:P.RF6JS,M0jj!,INSB=x-F8H)iwysfHuq,J+/F)Jt5xVm^t-2YQ)REDnDJz$B)S,S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49966	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	623	OUT	GET /builds/149f9b9/assets/images/public-web-styles/ui/close.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	818	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 465 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:33:01 GMT ETag: "0a676dbd2bc3021eb0f5faf4398ce836" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: 6QE2NINvY6OQYPlKdy2p1t34yp2p6Qsj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f0d2db130f25377126d8fc517e82fa4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: gzPtFXmps1GLj_FteeNUxTxF3fPJITy-NhGr1O-txaHhAA5Zy97EKw==
2024-04-26 04:11:57 UTC	465	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 53 cb 52 e3 30 10 bc e7 2b 54 e2 2a cb 92 1c bf a8 38 07 7c f5 9e f8 02 2a 80 ed 2a ef 26 b5 72 61 96 af df 6e 45 06 43 41 2a 1a 59 4e 77 cf f4 8c 72 f0 2f bd 78 fd 3d fd f1 8d 1c e6 f9 72 9b a6 cb b2 e8 25 d3 e7 bf 7d ea 8c 31 29 10 52 bc 8c 4f cb dd f9 b5 91 46 18 e1 f8 95 62 19 1f e7 a1 91 7c 1c 9e c6 7e 98 c3 f3 71 27 c4 e1 f2 30 0f e2 79 9c a6 46 de 3c 87 8f 14 8f 8d fc 65 ad de 2b 6b a6 42 67 09 d6 c9 e8 7d 82 a5 b8 5b 65 12 fc ec 13 9b 84 23 5f 77 d6 a8 4a 17 5d a6 4b e5 80 4f 22 61 8b 11 3e 48 80 ae 70 ee 00 67 06 ca ab 22 52 d4 9a 27 82 bc 55 e1 c4 5f d6 5a a6 95 10 f1 6a 83 f1 9b fa ba e8 e1 4d 8a 34 78 ed c5 f9 f2 70 1a e7 7f 68 8e b6 c1 ff da 81 60 19 95 43 33 43 66 a3 73 2c ea 96 58 1f 99 b6 e5 6f 3a f4 a9 9a Data Ascii: uSR0+T8\|&ranECAYNwr/x=r%}1)ROFb\|~q'0yF<e+kBg}[e#_wJ]KO"a>Hpg"R'U_ZjM4xph`C3Cfs,Xo:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49967	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1225	OUT	POST /services/squareup.onboarding.states.service.StatesService/Fetch HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 3 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: XUalvRbAHNKvu sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
2024-04-26 04:11:56 UTC	3	OUT	Data Raw: 08 c8 06 Data Ascii:
2024-04-26 04:11:57 UTC	772	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb5199ed2245-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.states.service.StatesService/Fetch x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:57 UTC	597	IN	Data Raw: 33 35 32 0d 0a 0a 0d 0a 07 41 6c 61 62 61 6d 61 12 02 41 4c 0a 0c 0a 06 41 6c 61 73 6b 61 12 02 41 4b 0a 0d 0a 07 41 72 69 7a 6f 6e 61 12 02 41 5a 0a 0e 0a 08 41 72 6b 61 6e 73 61 73 12 02 41 52 0a 10 0a 0a 43 61 6c 69 66 6f 72 6e 69 61 12 02 43 41 0a 0e 0a 08 43 6f 6c 6f 72 61 64 6f 12 02 43 4f 0a 11 0a 0b 43 6f 6e 6e 65 63 74 69 63 75 74 12 02 43 54 0a 0e 0a 08 44 65 6c 61 77 61 72 65 12 02 44 45 0a 1a 0a 14 44 69 73 74 72 69 63 74 20 6f 66 20 43 6f 6c 75 6d 62 69 61 12 02 44 43 0a 0d 0a 07 46 6c 6f 72 69 64 61 12 02 46 4c 0a 0d 0a 07 47 65 6f 72 67 69 61 12 02 47 41 0a 0c 0a 06 48 61 77 61 69 69 12 02 48 49 0a 0b 0a 05 49 64 61 68 6f 12 02 49 44 0a 0e 0a 08 49 6c 6c 69 6e 6f 69 73 12 02 49 4c 0a 0d 0a 07 49 6e 64 69 61 6e 61 12 02 49 4e 0a 0a 0a 04 49 Data Ascii: 352AlabamaALAlaskaAKArizonaAZArkansasARCaliforniaCAColoradoCOConnecticutCTDelawareDEDistrict of ColumbiaDCFloridaFLGeorgiaGAHawaiiHIIdahoIDIllinoisILIndianaINI
2024-04-26 04:11:57 UTC	260	IN	Data Raw: 4f 48 0a 0e 0a 08 4f 6b 6c 61 68 6f 6d 61 12 02 4f 4b 0a 0c 0a 06 4f 72 65 67 6f 6e 12 02 4f 52 0a 12 0a 0c 50 65 6e 6e 73 79 6c 76 61 6e 69 61 12 02 50 41 0a 12 0a 0c 52 68 6f 64 65 20 49 73 6c 61 6e 64 12 02 52 49 0a 14 0a 0e 53 6f 75 74 68 20 43 61 72 6f 6c 69 6e 61 12 02 53 43 0a 12 0a 0c 53 6f 75 74 68 20 44 61 6b 6f 74 61 12 02 53 44 0a 0f 0a 09 54 65 6e 6e 65 73 73 65 65 12 02 54 4e 0a 0b 0a 05 54 65 78 61 73 12 02 54 58 0a 0a 0a 04 55 74 61 68 12 02 55 54 0a 0d 0a 07 56 65 72 6d 6f 6e 74 12 02 56 54 0a 0e 0a 08 56 69 72 67 69 6e 69 61 12 02 56 41 0a 10 0a 0a 57 61 73 68 69 6e 67 74 6f 6e 12 02 57 41 0a 13 0a 0d 57 65 73 74 20 56 69 72 67 69 6e 69 61 12 02 57 56 0a 0f 0a 09 57 69 73 63 6f 6e 73 69 6e 12 02 57 49 0a 0d 0a 07 57 79 6f 6d 69 6e 67 12 Data Ascii: OHOklahomaOKOregonORPennsylvaniaPARhode IslandRISouth CarolinaSCSouth DakotaSDTennesseeTNTexasTXUtahUTVermontVTVirginiaVAWashingtonWAWest VirginiaWVWisconsinWIWyoming
2024-04-26 04:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49969	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1232	OUT	POST /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-csrf-token: undefined sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/x-protobuf accept: application/x-protobuf x-speleo-trace-id: qGRbXJjoEVfIh sec-ch-ua-platform: "Windows" Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
2024-04-26 04:11:56 UTC	59	OUT	Data Raw: 0a 18 52 45 43 41 50 54 43 48 41 5f 45 4e 54 45 52 50 52 49 53 45 5f 57 45 42 12 1a 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 61 70 74 63 68 61 2d 61 70 69 2d 6b 65 79 18 c8 06 20 04 Data Ascii: RECAPTCHA_ENTERPRISE_WEBonboarding-captcha-api-key
2024-04-26 04:11:57 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/x-protobuf Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb512e3331ef-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct frame-options: DENY Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: DENY x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:57 UTC	109	IN	Data Raw: 36 37 0d 0a 08 01 12 1a 6f 6e 62 6f 61 72 64 69 6e 67 2d 63 61 70 74 63 68 61 2d 61 70 69 2d 6b 65 79 1a 18 52 45 43 41 50 54 43 48 41 5f 45 4e 54 45 52 50 52 49 53 45 5f 57 45 42 28 c8 06 38 04 4a 28 36 4c 63 64 6e 48 4d 63 41 41 41 41 41 4e 34 4d 50 4e 43 39 45 6b 2d 73 64 6c 4e 4e 44 45 64 33 37 59 45 4e 30 5a 38 50 0d 0a Data Ascii: 67onboarding-captcha-api-keyRECAPTCHA_ENTERPRISE_WEB(8J(6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P
2024-04-26 04:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49970	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	1082	OUT	GET /mp/status HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934
2024-04-26 04:11:57 UTC	1342	IN	HTTP/1.1 401 Unauthorized Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2 Connection: close CF-Ray: 87a3bb525d70a554-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f;Version=1;Domain=squareup.com;Path=/;Max-Age=31536000;Secure;HttpOnly;SameSite=lax;Expires=Sat, 26 Apr 2025 04:11:57 GMT;Category=C0001 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct content-security-policy: object-src 'none'; base-uri 'none'; script-src 'nonce-ANmaj76Kd5/ldUDHTdwwnrc=' 'unsafe-inline' 'strict-dynamic' https: http: 'report-sample'; report-uri https://sentry.io/api/1474740/security/?sentry_key=f510e74496ac409fb59c50c52d7822da frame-options: SAMEORIGIN Set-Cookie: _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk;Version=1;Domain=squareup.com;Path=/;Max-Age=31536000;Secure;SameSite=lax;Expires=Sat, 26 Apr 2025 04:11:57 GMT;Category=C0001
2024-04-26 04:11:57 UTC	335	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 71 75 61 72 65 47 65 6f 3d 44 45 4c 45 54 45 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 20 53 65 63 75 72 65 3b 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 71 75 61 72 65 47 65 6f 3d 55 53 2d 46 4c 3b 20 44 6f 6d 61 69 6e 3d 73 71 75 61 72 65 75 70 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 20 53 65 63 75 72 65 3b 20 6d 61 78 2d 61 67 65 3d 32 34 31 39 32 30 30 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 2f 6d 70 2f 73 74 61 74 75 73 2f 2a 2a 0d 0a 78 2d 66 72 Data Ascii: Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200x-content-type-options: nosniffx-envoy-decorator-operation: /mp/status/**x-fr
2024-04-26 04:11:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49971	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:56 UTC	982	OUT	GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/p.js HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ
2024-04-26 04:11:57 UTC	701	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb527c660a2a-MIA CF-Cache-Status: HIT Age: 75 Cache-Control: public, max-age=120, stale-while-revalidate=120 Expires: Fri, 26 Apr 2024 04:12:42 GMT Last-Modified: Thu, 25 Apr 2024 18:58:22 GMT Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-expose-headers: x-kpsdk-ct,x-kpsdk-r,x-kpsdk-c Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Server: cloudflare
2024-04-26 04:11:57 UTC	668	IN	Data Raw: 31 33 36 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 50 53 44 4b 5f 30 78 33 38 34 36 28 29 7b 76 61 72 20 5f 30 78 34 39 38 38 33 36 3d 5b 27 57 35 5a 64 4a 6d 6b 79 57 50 4b 67 27 2c 27 57 52 74 64 54 53 6f 2b 57 37 61 27 2c 27 57 52 2f 63 51 38 6b 4f 57 37 4a 63 4a 57 27 2c 27 57 52 50 55 68 30 4e 63 48 38 6f 65 75 61 27 2c 27 42 71 6a 30 27 2c 27 7a 6d 6b 53 69 74 56 64 47 30 6d 55 75 65 65 75 74 75 70 64 49 38 6f 46 76 49 4a 64 49 33 72 6e 27 2c 27 57 50 74 63 47 43 6b 66 27 2c 27 57 4f 7a 58 57 37 64 64 48 38 6b 41 43 67 4f 62 57 37 38 27 2c 27 57 34 75 55 57 50 53 6e 69 53 6f 46 57 52 46 64 49 68 4e 64 4f 38 6f 5a 79 6d 6f 4b 57 34 37 63 55 6d 6b 6c 71 4d 4a 63 48 43 6f 4a 57 51 42 64 4e 38 6b 62 78 33 54 77 73 53 6f Data Ascii: 1363(function(){function KPSDK_0x3846(){var _0x498836=['W5ZdJmkyWPKg','WRtdTSo+W7a','WR/cQ8kOW7JcJW','WRPUh0NcH8oeua','Bqj0','zmkSitVdG0mUueeutupdI8oFvIJdI3rn','WPtcGCkf','WOzXW7ddH8kACgObW78','W4uUWPSniSoFWRFdIhNdO8oZymoKW47cUmklqMJcHCoJWQBdN8kbx3TwsSo
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 34 6c 63 56 53 6f 4b 57 34 61 6f 57 37 33 64 55 76 33 64 50 49 6c 63 4c 53 6f 33 69 77 70 63 4c 43 6b 43 57 50 54 73 57 52 76 65 57 52 5a 64 4c 4a 61 27 2c 27 57 34 2f 63 4d 5a 53 33 6c 53 6f 53 27 2c 27 57 36 4e 63 55 77 71 7a 57 4f 42 63 56 61 27 2c 27 43 64 69 38 65 64 69 6c 45 6d 6b 30 7a 4c 61 54 57 52 6c 63 4c 61 27 2c 27 63 6d 6f 64 57 52 46 64 47 77 47 27 2c 27 76 33 2f 63 48 4c 53 74 68 53 6b 6e 57 4f 64 64 4c 43 6f 6f 68 68 34 46 27 2c 27 57 4f 46 63 47 53 6b 62 72 38 6f 48 27 2c 27 71 53 6f 47 70 43 6b 4f 57 4f 76 75 57 51 42 63 4d 47 27 2c 27 57 51 4c 68 57 35 74 63 53 53 6f 75 65 6d 6b 79 71 5a 39 6e 57 35 6c 63 49 4a 4e 64 53 47 74 64 4b 30 68 64 4e 6d 6f 79 27 2c 27 57 50 31 31 57 35 78 63 50 71 27 2c 27 57 34 35 79 57 52 5a 63 4d 32 72 42 Data Ascii: 4lcVSoKW4aoW73dUv3dPIlcLSo3iwpcLCkCWPTsWRveWRZdLJa','W4/cMZS3lSoS','W6NcUwqzWOBcVa','Cdi8edilEmk0zLaTWRlcLa','cmodWRFdGwG','v3/cHLSthSknWOddLCoohh4F','WOFcGSkbr8oH','qSoGpCkOWOvuWQBcMG','WQLhW5tcSSouemkyqZ9nW5lcIJNdSGtdK0hdNmoy','WP11W5xcPq','W45yWRZcM2rB
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 35 57 50 34 27 2c 27 57 50 35 51 57 35 30 62 6e 58 38 4e 27 2c 27 57 52 57 74 57 37 4e 63 4a 47 27 2c 27 63 59 48 39 78 59 46 64 56 47 27 2c 27 57 36 70 63 56 33 65 6f 57 52 78 63 50 53 6b 68 57 4f 46 64 49 43 6f 56 43 43 6b 57 57 36 5a 63 4d 47 57 27 2c 27 57 52 4f 46 68 6d 6f 58 57 50 33 64 4e 78 61 70 27 2c 27 57 35 70 64 4c 57 5a 64 4c 62 46 63 52 4b 33 64 49 4a 56 64 56 67 5a 64 4c 38 6b 2b 72 71 6c 64 52 43 6f 75 57 35 5a 63 48 38 6f 45 27 2c 27 57 36 48 42 57 52 39 57 57 52 4e 63 56 31 54 6a 27 2c 27 6c 53 6b 56 64 61 6d 27 2c 27 57 51 4e 63 48 53 6f 6b 57 37 65 46 77 6d 6f 42 57 35 34 27 2c 27 57 52 53 70 62 53 6f 62 57 4f 42 64 4d 67 4b 65 76 4b 7a 71 6d 53 6f 6e 42 71 4b 44 57 4f 68 64 4b 6d 6b 76 57 4f 62 62 41 38 6f 54 57 37 79 58 78 6d 6f 62 Data Ascii: 5WP4','WP5QW50bnX8N','WRWtW7NcJG','cYH9xYFdVG','W6pcV3eoWRxcPSkhWOFdICoVCCkWW6ZcMGW','WROFhmoXWP3dNxap','W5pdLWZdLbFcRK3dIJVdVgZdL8k+rqldRCouW5ZcH8oE','W6HBWR9WWRNcV1Tj','lSkVdam','WQNcHSokW7eFwmoBW54','WRSpbSobWOBdMgKevKzqmSonBqKDWOhdKmkvWObbA8oTW7yXxmob
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 4a 63 53 6f 4a 57 50 4c 47 27 2c 27 6a 6d 6b 4c 57 34 72 53 57 50 38 27 2c 27 46 57 78 63 52 4a 57 5a 57 51 38 50 70 6d 6f 63 27 2c 27 57 52 4f 46 57 37 74 63 48 43 6b 61 79 43 6b 58 66 38 6f 44 43 6d 6b 4d 72 59 74 64 4a 38 6f 33 57 50 56 63 53 76 58 4a 57 51 74 63 48 73 4e 64 54 43 6b 45 57 50 43 52 27 2c 27 76 67 74 63 49 31 43 64 65 53 6b 67 57 51 30 27 2c 27 57 4f 75 64 57 4f 68 64 4b 43 6b 36 7a 38 6f 38 57 34 50 2f 67 53 6f 30 62 67 74 63 4c 67 65 7a 57 37 53 27 2c 27 57 4f 62 78 63 38 6f 54 57 34 47 27 2c 27 70 74 31 37 78 5a 37 64 56 53 6b 7a 41 4e 42 63 56 6d 6f 53 57 4f 47 76 27 2c 27 57 37 34 62 41 43 6f 6a 78 47 52 64 51 6d 6f 49 6a 6d 6b 70 63 4e 70 64 56 47 27 2c 27 57 50 42 63 47 6d 6b 45 78 38 6f 33 7a 76 68 64 50 6d 6b 2b 27 2c 27 57 50 Data Ascii: JcSoJWPLG','jmkLW4rSWP8','FWxcRJWZWQ8Ppmoc','WROFW7tcHCkayCkXf8oDCmkMrYtdJ8o3WPVcSvXJWQtcHsNdTCkEWPCR','vgtcI1CdeSkgWQ0','WOudWOhdKCk6z8o8W4P/gSo0bgtcLgezW7S','WObxc8oTW4G','pt17xZ7dVSkzANBcVmoSWOGv','W74bACojxGRdQmoIjmkpcNpdVG','WPBcGmkEx8o3zvhdPmk+','WP
2024-04-26 04:11:57 UTC	196	IN	Data Raw: 57 57 52 4a 64 4f 61 27 2c 27 45 72 35 54 64 49 74 63 56 47 27 2c 27 57 34 75 4d 44 43 6f 42 57 50 2f 63 4d 5a 70 64 53 53 6f 6e 57 36 2f 64 51 38 6b 45 68 68 64 64 53 71 27 2c 27 42 68 5a 63 4c 67 62 47 57 50 66 41 27 2c 27 62 43 6f 2b 6a 49 75 52 70 61 27 2c 27 57 36 43 68 57 4f 70 63 50 53 6b 74 57 4f 6c 64 51 43 6f 31 57 35 56 63 48 53 6f 6d 57 50 4e 64 4a 38 6b 4f 27 2c 27 57 50 6e 48 57 36 4a 64 56 53 6b 33 43 78 6e 74 57 51 74 64 4a 57 27 2c 27 57 4f 7a 47 57 36 78 64 53 43 6b 79 27 2c 27 63 6d 6f 56 70 63 43 59 6a 6d 6f 4d 27 2c 27 57 52 48 4f 62 76 6c 63 48 53 6f 65 0d 0a Data Ascii: WWRJdOa','Er5TdItcVG','W4uMDCoBWP/cMZpdSSonW6/dQ8kEhhddSq','BhZcLgbGWPfA','bCo+jIuRpa','W6ChWOpcPSktWOldQCo1W5VcHSomWPNdJ8kO','WPnHW6JdVSk3CxntWQtdJW','WOzGW6xdSCky','cmoVpcCYjmoM','WRHObvlcHSoe
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 72 53 6f 61 27 2c 27 57 52 6c 63 51 43 6b 76 57 37 37 63 4a 47 37 64 51 38 6b 57 66 38 6f 42 27 2c 27 79 53 6b 54 6b 73 46 64 49 75 4b 30 27 2c 27 57 34 5a 64 4e 38 6b 72 57 4f 4b 7a 62 47 27 2c 27 6b 47 75 4e 79 57 27 2c 27 7a 68 2f 63 54 4d 62 56 57 50 66 33 57 51 38 6d 57 52 68 63 48 53 6b 62 57 4f 53 79 57 37 4e 64 47 71 6a 4d 41 4b 6d 27 2c 27 41 33 72 59 70 53 6f 44 57 37 34 27 2c 27 57 4f 37 64 4d 74 54 58 57 35 69 27 2c 27 57 37 39 71 57 51 2f 64 56 59 69 51 57 36 71 27 2c 27 57 37 4e 63 55 77 71 7a 57 51 6c 63 52 6d 6b 52 57 4f 37 64 54 53 6f 4c 43 6d 6b 4d 27 2c 27 57 34 5a 64 49 62 4e 64 4c 71 78 63 51 76 4e 64 47 61 27 2c 27 57 34 70 63 56 33 6d 6b 57 51 56 63 4f 43 6b 63 57 51 4a 64 53 38 6f 52 43 6d 6b 2b 57 36 70 63 4d 61 Data Ascii: 7ff9rSoa','WRlcQCkvW77cJG7dQ8kWf8oB','ySkTksFdIuK0','W4ZdN8krWOKzbG','kGuNyW','zh/cTMbVWPf3WQ8mWRhcHSkbWOSyW7NdGqjMAKm','A3rYpSoDW74','WO7dMtTXW5i','W79qWQ/dVYiQW6q','W7NcUwqzWQlcRmkRWO7dTSoLCmkM','W4ZdIbNdLqxcQvNdGa','W4pcV3mkWQVcOCkcWQJdS8oRCmk+W6pcMa
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 43 6f 75 74 53 6f 76 74 72 5a 64 4b 4a 6d 36 57 34 52 64 54 62 50 64 74 4c 69 2b 69 71 27 2c 27 57 4f 78 63 4e 43 6b 44 72 38 6f 39 43 4c 57 27 2c 27 57 35 4e 64 47 43 6b 44 57 4f 38 67 27 2c 27 57 50 6a 64 66 43 6f 35 57 35 4e 63 53 73 52 63 47 61 27 2c 27 57 52 42 63 47 6d 6b 79 78 43 6f 35 7a 75 33 63 54 6d 6b 36 72 53 6b 77 57 51 66 38 6b 53 6f 53 67 4b 72 39 57 51 69 70 57 37 44 6c 57 37 78 64 53 73 6d 4a 57 51 76 30 64 6d 6b 71 69 43 6f 4d 44 53 6b 4e 57 35 53 37 70 58 30 4e 57 4f 70 64 56 38 6b 38 7a 72 43 2b 27 2c 27 57 51 7a 58 57 36 4a 64 54 38 6b 71 41 4e 44 65 57 51 4a 64 53 43 6b 56 78 4b 56 64 4a 4d 33 63 56 6d 6b 4d 74 53 6b 69 57 36 2f 63 4e 65 53 27 2c 27 42 53 6f 4d 71 71 78 64 54 43 6f 33 57 37 2f 64 56 4d 6d 79 57 36 74 63 50 57 70 63 Data Ascii: CoutSovtrZdKJm6W4RdTbPdtLi+iq','WOxcNCkDr8o9CLW','W5NdGCkDWO8g','WPjdfCo5W5NcSsRcGa','WRBcGmkyxCo5zu3cTmk6rSkwWQf8kSoSgKr9WQipW7DlW7xdSsmJWQv0dmkqiCoMDSkNW5S7pX0NWOpdV8k8zrC+','WQzXW6JdT8kqANDeWQJdSCkVxKVdJM3cVmkMtSkiW6/cNeS','BSoMqqxdTCo3W7/dVMmyW6tcPWpc
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 61 42 63 49 74 37 64 4e 71 27 2c 27 57 34 5a 64 49 61 56 64 4c 47 74 63 50 76 2f 64 49 47 2f 64 52 78 56 64 48 6d 6f 4f 27 2c 27 62 43 6b 59 57 35 62 49 57 50 4a 64 54 4e 30 27 2c 27 6b 57 53 56 44 47 27 2c 27 57 51 42 64 55 4b 66 73 57 52 54 42 27 2c 27 57 50 4a 64 54 43 6f 34 57 37 4c 6a 57 37 4f 39 57 51 4e 63 50 38 6b 47 57 37 30 65 6f 6d 6f 4e 57 35 35 7a 57 52 47 50 57 37 4c 6e 57 36 30 34 64 61 27 2c 27 73 53 6b 73 66 47 2f 64 50 33 75 69 79 75 71 31 42 4e 4a 64 55 53 6f 31 41 47 64 64 51 66 7a 37 57 36 42 64 4b 33 37 63 52 73 71 7a 6f 38 6f 4b 27 2c 27 57 52 48 56 61 66 6c 63 48 38 6f 76 76 57 27 2c 27 67 6d 6f 78 57 52 46 64 4d 65 4e 64 54 53 6f 69 69 62 69 61 27 2c 27 57 35 4f 34 57 36 68 63 54 38 6f 51 63 47 27 2c 27 57 51 46 64 56 43 6b 4d 6b Data Ascii: aBcIt7dNq','W4ZdIaVdLGtcPv/dIG/dRxVdHmoO','bCkYW5bIWPJdTN0','kWSVDG','WQBdUKfsWRTB','WPJdTCo4W7LjW7O9WQNcP8kGW70eomoNW55zWRGPW7LnW604da','sSksfG/dP3uiyuq1BNJdUSo1AGddQfz7W6BdK37cRsqzo8oK','WRHVaflcH8ovvW','gmoxWRFdMeNdTSoiibia','W5O4W6hcT8oQcG','WQFdVCkMk
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 63 4f 31 56 64 4e 4a 52 64 4d 77 42 64 4c 38 6f 38 72 61 27 2c 27 57 34 48 71 57 52 78 64 4a 73 34 32 57 37 64 63 4a 53 6f 48 46 61 27 2c 27 73 38 6b 58 66 49 2f 64 48 32 6d 4d 76 4d 71 43 74 4d 4e 64 48 6d 6f 41 74 49 70 64 48 78 4c 76 57 36 33 64 50 4b 4e 63 4e 72 69 27 2c 27 57 37 33 64 54 53 6f 37 76 53 6f 63 6c 77 79 27 2c 27 57 50 4c 31 57 34 2f 63 54 6d 6f 41 63 53 6b 73 76 59 38 27 2c 27 57 34 75 55 57 4f 79 77 6a 6d 6f 75 27 2c 27 43 32 70 63 4c 31 75 6f 27 2c 27 57 36 4a 64 55 6d 6f 35 72 43 6f 6f 27 2c 27 57 35 68 64 4f 43 6f 65 57 50 61 27 2c 27 57 34 44 4c 57 52 35 5a 57 51 37 63 4a 32 48 48 27 2c 27 42 33 35 4f 66 6d 6f 73 57 37 37 63 4a 43 6f 47 57 34 33 64 4b 66 70 64 4b 62 76 45 57 34 4b 65 46 53 6b 2f 27 2c 27 69 64 6e 53 75 61 27 2c 27 Data Ascii: cO1VdNJRdMwBdL8o8ra','W4HqWRxdJs42W7dcJSoHFa','s8kXfI/dH2mMvMqCtMNdHmoAtIpdHxLvW63dPKNcNri','W73dTSo7vSoclwy','WPL1W4/cTmoAcSksvY8','W4uUWOywjmou','C2pcL1uo','W6JdUmo5rCoo','W5hdOCoeWPa','W4DLWR5ZWQ7cJ2HH','B35OfmosW77cJCoGW43dKfpdKbvEW4KeFSk/','idnSua','
2024-04-26 04:11:57 UTC	1369	IN	Data Raw: 64 4d 6d 6b 31 44 47 27 2c 27 7a 43 6b 4e 69 59 52 64 4d 75 79 30 27 2c 27 63 43 6b 32 57 34 76 52 57 51 4e 64 53 32 2f 64 54 43 6f 66 57 35 68 63 4f 43 6f 76 68 68 61 27 2c 27 57 34 56 64 47 38 6b 68 57 50 53 67 65 43 6f 30 27 2c 27 57 4f 72 46 64 75 33 63 4b 43 6f 46 72 6d 6f 61 27 2c 27 57 50 39 4d 57 34 5a 63 54 43 6f 71 27 2c 27 57 4f 78 63 47 6d 6b 75 73 53 6f 53 44 61 27 2c 27 57 35 38 30 57 37 37 63 50 53 6f 47 64 4b 38 51 73 75 42 63 4c 47 4c 2b 6c 48 30 2b 65 73 69 51 79 6d 6b 51 65 6d 6b 65 62 74 4f 50 6a 38 6b 37 76 53 6f 73 57 51 34 74 27 2c 27 74 33 5a 63 4c 77 66 51 57 51 7a 67 57 52 71 39 57 51 37 63 4f 6d 6b 67 57 50 71 73 57 36 75 27 2c 27 79 53 6b 4a 6b 73 43 27 2c 27 57 37 52 64 55 71 5a 64 47 57 74 63 4f 31 56 64 4e 4a 52 64 4d 77 5a Data Ascii: dMmk1DG','zCkNiYRdMuy0','cCk2W4vRWQNdS2/dTCofW5hcOCovhha','W4VdG8khWPSgeCo0','WOrFdu3cKCoFrmoa','WP9MW4ZcTCoq','WOxcGmkusSoSDa','W580W77cPSoGdK8QsuBcLGL+lH0+esiQymkQemkebtOPj8k7vSosWQ4t','t3ZcLwfQWQzgWRq9WQ7cOmkgWPqsW6u','ySkJksC','W7RdUqZdGWtcO1VdNJRdMwZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49972	34.120.195.249	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	430	OUT	GET /api/1224658/envelope/?sentry_key=9137ea8d795940958d24a85e9a579e3c&sentry_version=7 HTTP/1.1 Host: o160250.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49973	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1206	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:11:57 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb533a458df4-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:57 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49975	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1486	OUT	GET /tracking.json HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:11:57 UTC	1084	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb54cd157420-MIA CF-Cache-Status: BYPASS Cache-Control: max-age=0, private, must-revalidate ETag: W/"5811becfceb9c687e1b7af2caddc8427" Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding, Origin access-control-allow-headers: Origin, Content-Type, Accept, Authorization, X-Auth-Token, X-Allow-Cookies, X-Block-Cookies access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE, HEAD Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /tracking.json x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xms-response: true x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:57 UTC	91	IN	Data Raw: 35 35 0d 0a 7b 22 65 6d 70 6c 6f 79 6d 65 6e 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 6d 65 72 63 68 61 6e 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 70 65 72 73 6f 6e 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 75 6e 69 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 7d 0d 0a Data Ascii: 55{"employment_token":null,"merchant_token":null,"person_token":null,"unit_token":null}
2024-04-26 04:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49974	54.148.46.119	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	614	OUT	POST /v2/c HTTP/1.1 Host: api.neuro-id.com Connection: keep-alive Content-Length: 1836 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:57 UTC	1836	OUT	Data Raw: 6b 65 79 3d 6b 65 79 5f 6c 69 76 65 5f 4a 78 72 46 4b 43 71 7a 59 64 64 47 75 36 69 4f 65 6f 72 39 73 45 49 36 26 69 64 3d 64 32 37 66 36 36 36 34 64 34 30 38 26 73 65 73 73 69 6f 6e 49 64 3d 62 30 32 31 62 30 32 65 2d 65 66 61 34 2d 34 37 64 39 2d 39 33 38 63 2d 32 30 37 61 61 37 32 33 66 33 64 37 26 63 6c 69 65 6e 74 49 64 3d 36 34 32 37 31 35 30 37 2d 64 66 65 31 2d 34 30 65 36 2d 38 35 30 36 2d 35 66 32 36 34 31 62 66 39 30 32 31 26 75 73 65 72 49 64 3d 6e 75 6c 6c 26 70 61 67 65 49 64 3d 64 32 37 66 36 36 35 65 36 38 30 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 73 69 67 6e 75 70 26 6a 73 56 65 72 73 69 6f 6e 3d 33 2e 32 2e 30 26 65 76 65 6e 74 73 3d 57 31 73 78 4d 44 41 73 49 6d 74 6c 65 Data Ascii: key=key_live_JxrFKCqzYddGu6iOeor9sEI6&id=d27f6664d408&sessionId=b021b02e-efa4-47d9-938c-207aa723f3d7&clientId=64271507-dfe1-40e6-8506-5f2641bf9021&userId=null&pageId=d27f665e6801&url=https%3A%2F%2Fsquareup.com%2Fsignup&jsVersion=3.2.0&events=W1sxMDAsImtle
2024-04-26 04:11:57 UTC	248	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 04:11:57 GMT Connection: close X-Request-Id: req_1s0CwHGk5d2VS3yx Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://squareup.com Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49977	13.32.87.33	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	420	OUT	GET /builds/149f9b9/assets/images/ecom/weebly_by_square.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	670	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3889 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "c837a388b8a10d82f2b913eab8400b54" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: Aw4BMEpTpupME38h1D766i9S1ruwB3Zk Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3f72a8b28c744ea2f627e9f8a8ac8282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: l-ae8H2erCQt0LU84KjHpWKlkU2oMqaKqG4x-myA82tdXt5ZaUIAdg== Vary: Origin
2024-04-26 04:11:58 UTC	3889	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 65 5a 3d 93 1c b7 11 cd f5 2b a6 4e 89 1d 78 08 34 be 5d 3a 05 9a 64 83 dd 2a 47 1b 5c e6 32 4f 24 ab 68 4a 25 51 a2 7e be df 6b a0 81 d9 73 c2 e3 1b 00 8d 46 37 fa 13 fb c3 ef 7f 7e d8 be 7d 7a ff f5 e3 f3 93 97 f2 b4 7d 7c fd f4 e1 e3 d7 e7 a7 28 4f db 9f 9f 5e bf fd f4 cb 5f cf 4f 6e 73 1b 46 37 7e fc f9 d3 e7 cf cf 4f 5f 7e f9 f2 fa b4 fd f5 df cf 5f 7e 7f 7e fa f8 f5 eb af ff 7c f7 ee db b7 6f fb b7 b0 ff f2 db 87 77 e2 9c 7b 07 d2 4f 3f 7e f7 c3 87 ed 3f 9f 3f fd fa 8f 5f ff cd 3d fe f8 ed f3 df be 27 76 7f e7 18 3f 2a c5 7f fc f6 c7 e7 d7 e7 a7 d7 3f 5f bf fc f2 fe fd 53 5f f2 e6 db fb e7 a7 5b 29 7b 8d b5 6e ee 5e f7 d2 6a cd 47 a9 7b 6b 6d 2b 7b 48 a5 f8 ad ba bd e4 12 b6 bc a7 dc 88 65 af a5 19 3c 2a e6 d5 2a 73 b8 Data Ascii: eZ=+Nx4]:dG\2O$hJ%Q~ksF7~}z}\|(O^_OnsF7~O_~_~~\|ow{O?~??_='v??_S_[){n^jG{km+{He<**s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49978	13.32.87.33	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	415	OUT	GET /builds/149f9b9/assets/images/vector/checkmark.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	669	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 449 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Last-Modified: Wed, 24 Apr 2024 18:32:59 GMT ETag: "e58b413cfa1e5d5c0bbbed01743f7e11" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: zs83036Y6g0RB8s7ErNOfi9z4FqDSTFE Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ee5a1fbfd85d9d25aef83ca16d91afca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: EhKPF3xTm2ypoc_qehls9sSAacB1WHvNbnqUCYj_1HIySf8tfhN-Tw== Vary: Origin
2024-04-26 04:11:58 UTC	449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 6d 52 cb 6e 9c 30 14 dd e7 2b 6e 9d 4d 2b 8d b1 81 0c 8f 11 10 29 23 a5 9b 46 8a 94 66 d3 1d 01 07 dc 61 6c 04 ce 30 f9 fb 5e 0c a4 64 14 64 71 1f e7 dc 87 8f 9c dc 9e 8f 0d 9c 44 d7 4b ad 52 e2 3a 9c 80 50 85 2e a5 aa 52 f2 fc fb 9e 46 e4 36 bb 4a fa 53 05 83 2c 4d 9d 92 30 6a cf 04 6a 21 ab da 2c d1 49 8a e1 4e 9f 53 42 3d c0 13 b9 78 c8 ba 2d 46 38 48 f5 29 a9 8d 69 77 8c 0d c3 e0 0c be a3 bb 8a 79 9c 73 86 03 66 ca ee dc 48 75 f8 8a e8 c6 71 cc 2c 4a b2 2b c0 2f f9 46 29 fc 14 4a 74 b9 d1 dd 0e 9e 0e c2 14 35 dc 78 f0 dd 0f c2 c8 fd 01 14 56 6d 5e 74 2d 8e 32 9f af e7 14 fa c8 fa a9 82 d2 b9 a1 91 a6 11 59 51 8b e2 90 b0 29 98 80 52 f4 45 b6 ef 44 6e 44 89 4a 98 7a 1e e6 24 cc 42 0b eb b5 cf c6 0c 9a 29 53 81 2c 53 f2 f4 Data Ascii: mRn0+nM+)#Ffal0^ddqDKR:P.RF6JS,M0jj!,INSB=x-F8H)iwysfHuq,J+/F)Jt5xVm^t-2YQ)REDnDJz$B)S,S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49979	13.32.87.33	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	427	OUT	GET /builds/149f9b9/assets/images/public-web-styles/ui/spinner.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	669	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 382 Connection: close Date: Fri, 26 Apr 2024 04:11:58 GMT Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "08dc65281c3db6670b9435f5eacf9ca6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: 8mNCAEeiNHxjoIHEXih9tjbeo6qaHp5L Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b3ca1a7752327aa687a6611c7f28951e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: zXpubZkxlgx4dKUn_G2J3MTtlgOJOuFtOlUGKkdQcV22B_pyUl5Rww== Vary: Origin
2024-04-26 04:11:58 UTC	382	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 93 5d 4f 83 30 14 86 ef f7 2b 9a ee 46 93 ae b4 25 8c 39 61 17 2e d1 2b e3 85 d9 f5 42 b6 0e 9a 54 20 b4 0e f0 d7 7b 5a 98 99 8b 89 1f 37 02 fd e0 ed 39 e7 a5 7d 42 62 8e 39 ea 5e 74 69 52 5c 58 5b 2f 83 a0 6d 5b da 86 b4 6a f2 40 30 c6 02 88 c0 e8 a8 64 7b 57 75 29 66 88 a1 38 82 07 a3 56 ed 6d 91 62 37 2d a4 ca 0b eb e7 ab 09 42 89 56 a5 cc 9a 87 26 db 2b 59 5a a4 f6 29 36 b5 2a 4b d9 6c b5 8b dc 72 8c f2 71 75 53 2a 0b ee af 46 36 cf 75 b6 93 4f e5 c6 48 8c 3a 0e 66 18 f5 30 44 73 2a c0 a4 13 83 59 2f 4e 92 f3 02 37 63 ab 1a 55 87 83 91 d6 e7 18 db 6b 09 8e 20 cf 76 95 ae 9a e5 f4 de 5f b7 5e aa c0 45 d9 7e c9 28 14 0b be aa c1 7f 5e 63 ac 90 04 9f b7 ec b5 3a b3 05 3a 28 ad 61 77 8d be 9a 5e 1c c1 35 46 70 2e 8f 61 4c Data Ascii: ]O0+F%9a.+BT {Z79}Bb9^tiR\X[/m[j@0d{Wu)f8Vmb7-BV&+YZ)6KlrquSF6uOH:f0Ds*Y/N7cUk v_^E~(^c::(aw^5Fp.aL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49980	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1342	OUT	GET /services/squareup.onboarding.states.service.StatesService/Fetch HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22
2024-04-26 04:11:58 UTC	869	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb564d38b3e0-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.states.service.StatesService/Fetch x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:58 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49981	13.32.87.33	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	425	OUT	GET /builds/149f9b9/assets/images/public-web-styles/ui/close.svg HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	669	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 465 Connection: close Date: Fri, 26 Apr 2024 04:11:59 GMT Last-Modified: Wed, 24 Apr 2024 18:33:01 GMT ETag: "0a676dbd2bc3021eb0f5faf4398ce836" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Content-Encoding: gzip Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: 6QE2NINvY6OQYPlKdy2p1t34yp2p6Qsj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 1d70b90303ff56b86662db87683a2a04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: FPt7mX_droZBRIMXmNHjIzehWDquWebQSfjjb0nQpJVatsoW3XwCxA== Vary: Origin
2024-04-26 04:11:58 UTC	465	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 53 cb 52 e3 30 10 bc e7 2b 54 e2 2a cb 92 1c bf a8 38 07 7c f5 9e f8 02 2a 80 ed 2a ef 26 b5 72 61 96 af df 6e 45 06 43 41 2a 1a 59 4e 77 cf f4 8c 72 f0 2f bd 78 fd 3d fd f1 8d 1c e6 f9 72 9b a6 cb b2 e8 25 d3 e7 bf 7d ea 8c 31 29 10 52 bc 8c 4f cb dd f9 b5 91 46 18 e1 f8 95 62 19 1f e7 a1 91 7c 1c 9e c6 7e 98 c3 f3 71 27 c4 e1 f2 30 0f e2 79 9c a6 46 de 3c 87 8f 14 8f 8d fc 65 ad de 2b 6b a6 42 67 09 d6 c9 e8 7d 82 a5 b8 5b 65 12 fc ec 13 9b 84 23 5f 77 d6 a8 4a 17 5d a6 4b e5 80 4f 22 61 8b 11 3e 48 80 ae 70 ee 00 67 06 ca ab 22 52 d4 9a 27 82 bc 55 e1 c4 5f d6 5a a6 95 10 f1 6a 83 f1 9b fa ba e8 e1 4d 8a 34 78 ed c5 f9 f2 70 1a e7 7f 68 8e b6 c1 ff da 81 60 19 95 43 33 43 66 a3 73 2c ea 96 58 1f 99 b6 e5 6f 3a f4 a9 9a Data Ascii: uSR0+T8\|&ranECAYNwr/x=r%}1)ROFb\|~q'0yF<e+kBg}[e#_wJ]KO"a>Hpg"R'U_ZjM4xph`C3Cfs,Xo:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49982	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	551	OUT	OPTIONS /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-request-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	582	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49984	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	551	OUT	OPTIONS /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-request-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	582	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49983	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	551	OUT	OPTIONS /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-request-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	582	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49985	151.101.1.49	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1093	OUT	GET /tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1 Host: tealium-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1677 x-amz-id-2: NrNQMgHYX2nfX/9SLRGESjrzM5lcmN8tVGRDqHcvqztVEWKpKHMcpUcge6ODIH7aDaij3U4nlUU= x-amz-request-id: 1TMMFZK3PF5T06CV Last-Modified: Wed, 20 Oct 2021 18:40:45 GMT ETag: "082aa9a2b863cf297c3696bfab81c7fc" Accept-Ranges: bytes Content-Type: text/html Server: AmazonS3 Date: Fri, 26 Apr 2024 04:11:58 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kpdk1780120-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714104718.076912,VS0,VE158 Referrer-Policy: no-referrer-when-downgrade
2024-04-26 04:11:58 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 71 75 61 72 65 20 41 6e 61 6c 79 74 69 63 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 55 55 49 44 20 67 65 6e 65 72 61 74 6f 72 0a 20 20 20 20 20 20 20 20 2f 2f 20 50 72 69 76 61 74 65 20 61 72 72 61 79 20 6f 66 20 63 68 61 72 73 20 74 6f 20 75 73 65 0a 20 20 20 20 20 20 20 20 76 61 72 20 43 48 41 52 53 20 3d 20 27 30 31 32 33 34 35 36 37 38 39 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 27 2e 73 70 6c Data Ascii: <html><head> <title>Square Analytics</title> <script type="text/javascript"> (function() { // UUID generator // Private array of chars to use var CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'.spl
2024-04-26 04:11:58 UTC	299	IN	Data Raw: 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 28 6e 6f 73 63 72 69 70 74 29 20 2d 2d 3e 0a 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 6e 73 2e 68 74 6d 6c 3f 69 64 3d 47 54 4d 2d 50 37 32 54 35 4d 35 22 0a 68 65 69 67 68 74 3d 22 30 22 20 77 69 64 74 68 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 47 6f 6f 67 6c 65 Data Ascii: ogle Tag Manager --></head><body>... Google Tag Manager (noscript) --><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-P72T5M5"height="0" width="0" style="display: none; visibility: hidden;"></iframe></noscript>... End Google

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49987	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1206	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:11:58 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb589b1874a0-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:58 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49988	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:57 UTC	1963	OUT	GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0 HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
2024-04-26 04:11:58 UTC	1227	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb57cced8dd0-MIA CF-Cache-Status: BYPASS Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Set-Cookie: KP_UIDz-ssn=031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJ; Max-Age=86400; Path=/; Expires=Sat, 27 Apr 2024 04:11:58 GMT; HttpOnly; Secure; SameSite=None Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-expose-headers: x-kpsdk-ct,x-kpsdk-r,x-kpsdk-c p3p: CP="This site does not specify a policy in the P3P header" pragma: no-cache Set-Cookie: KP_UIDz=031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJ; Max-Age=86400; Path=/; Expires=Sat, 27 Apr 2024 04:11:58 GMT; HttpOnly Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200
2024-04-26 04:11:58 UTC	223	IN	Data Raw: 78 2d 6b 70 73 64 6b 2d 63 74 3a 20 30 33 31 7a 32 37 6e 59 79 7a 70 4f 51 73 4e 31 51 6c 66 39 4a 48 59 63 6c 61 33 52 33 4e 42 38 48 4b 42 6b 71 49 78 61 6f 34 58 44 34 47 65 75 58 64 78 52 69 52 65 38 34 4d 74 51 30 6f 43 52 55 4f 6f 4d 44 30 36 63 55 71 68 68 59 48 39 30 70 37 58 76 67 39 67 75 68 70 6b 78 57 65 6f 78 6a 41 4c 38 34 72 51 6f 48 46 76 48 54 52 46 7a 68 6f 30 34 4a 61 76 55 65 53 75 55 73 39 68 37 53 6e 64 47 73 58 4c 50 78 43 79 4d 4a 63 47 56 41 34 38 74 63 75 45 78 65 70 6e 32 58 76 55 48 55 46 62 4d 51 36 6c 4c 41 4a 0d 0a 78 2d 6b 70 73 64 6b 2d 72 3a 20 31 2d 41 41 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: x-kpsdk-ct: 031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJx-kpsdk-r: 1-AAServer: cloudflare
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 31 34 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 4b 50 53 44 4b 3d 7b 7d 3b 4b 50 53 44 4b 2e 6e 6f 77 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 2e 62 69 6e 64 28 70 65 72 66 6f 72 6d 61 6e 63 65 29 3a 44 61 74 65 2e 6e 6f 77 2e 62 69 6e 64 28 44 61 74 65 29 3b 4b 50 53 44 4b 2e 73 74 61 72 74 3d 4b 50 53 44 4b 2e 6e 6f 77 28 29 3b 4b 50 53 44 4b 2e 73 63 72 69 70 74 53 74 61 72 74 3d 4b 50 53 44 4b 2e 6e 6f 77 28 29 3b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e Data Ascii: 1480<!DOCTYPE html><html><head></head><body><script>window.KPSDK={};KPSDK.now=typeof performance!=='undefined'&&performance.now?performance.now.bind(performance):Date.now.bind(Date);KPSDK.start=KPSDK.now();KPSDK.scriptStart=KPSDK.now();"use strict";(fun
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 51 44 33 6e 7c 51 45 2b 4d 30 51 7c 2b 4d 33 51 4f 74 51 73 34 41 2b 4d 73 3e 41 32 44 73 39 41 7a 7c 73 74 41 49 d0 b8 73 53 41 55 36 73 37 41 24 43 73 7e 41 6e 6f 67 57 41 67 4f 41 31 37 32 51 33 31 34 41 32 44 33 31 37 41 55 36 37 51 32 44 55 36 7a 7c 5e 4d 49 d0 b8 33 31 7e 41 55 36 79 49 d0 b8 31 55 36 36 32 44 7a 7c 49 d0 b8 49 51 24 51 2b 4d 30 51 57 41 2b 4d 33 31 57 41 2b 4d 37 51 2b 4d 44 39 49 31 7c 49 d0 b8 30 51 4f 41 49 d0 b8 33 51 75 34 51 31 41 45 2b 4d 63 73 31 2b 4d 33 31 39 41 49 d0 b8 33 31 31 7a 7c 2b 31 49 d0 b8 7a 7c 2b 4d 38 31 41 33 31 57 41 7a 7c 37 51 7a 7c 44 37 7e 31 44 2b 4d 62 2b 4d 4f 3e 51 33 31 3e 41 7a 7c 33 31 4f 41 49 d0 b8 2b 31 7a 7c 49 d0 b8 2b 4d 33 51 57 74 51 2b 51 2b 4d 37 51 2b 4d 44 7e 6d 36 49 d0 b8 5e 4d 24 Data Ascii: QD3n\|QE+M0Q\|+M3QOtQs4A+Ms>A2Ds9Az\|stAIsSAU6s7A$Cs~AnogWAgOA172Q314A2D317AU67Q2DU6z\|^MI31~AU6yI1U662Dz\|IIQ$Q+M0QWA+M31WA+M7Q+MD9I1\|I0QOAI3Qu4Q1AE+Mcs1+M319AI311z\|+1Iz\|+M81A31WAz\|7Qz\|D7~1D+Mb+MO>Q31>Az\|31OAI+1z\|I+M3QWtQ+Q+M7Q+MD~m6I^M$
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 4f 51 32 44 44 7a 6f 4d 6e 6f 6d 6e 6f 39 75 31 33 31 3c 44 32 44 4f 51 32 44 44 3d 3d 71 4d 7a 7c 49 51 7a 7c 6e 6f 62 6e 6f 57 42 41 3e 31 44 3e 2b 43 7c 7a 7c 37 51 7a 7c 44 33 50 71 44 55 36 5e 4d 24 43 33 31 57 44 32 71 79 24 43 31 32 71 36 7a 7c 55 36 24 43 49 51 24 51 32 44 70 51 32 44 33 31 3c 44 32 44 4f 51 32 44 44 74 49 71 6f 55 36 6d 55 36 42 72 41 72 51 44 3e 3e 71 4e 44 33 6e 7c 51 24 43 37 51 24 43 44 3d 4d 44 6e 6f 5e 4d 2b 77 33 31 3c 44 7a 5a 79 2b 77 31 7a 5a 36 24 43 6e 6f 2b 77 49 51 24 51 32 44 49 51 32 44 55 36 62 55 36 39 32 41 33 31 46 6e 6f 33 31 57 44 55 36 33 31 4f 44 32 71 4d 6e 6f 55 36 32 71 32 44 70 51 32 44 38 58 3e 34 41 44 33 6e 7c 51 4d 2b 4d 30 51 45 2b 4d 33 51 3e 49 41 73 37 7c 2b 4d 3e 31 44 55 39 43 d0 b8 2b 4d 78 Data Ascii: OQ2DDzoMnomno9u131<D2DOQ2DD==qMz\|IQz\|nobnoWBA>1D>+C\|z\|7Qz\|D3PqDU6^M$C31WD2qy$C12q6z\|U6$CIQ$Q2DpQ2D31<D2DOQ2DDtIqoU6mU6BrArQD>>qND3n\|Q$C7Q$CD=MDno^M+w31<DzZy+w1zZ6$Cno+wIQ$Q2DIQ2DU6bU692A31Fno31WDU631OD2qMnoU62q2DpQ2D8X>4AD3n\|QM+M0QE+M3Q>IAs7\|+M>1DU9C+Mx
2024-04-26 04:11:58 UTC	1149	IN	Data Raw: 57 4d 33 31 53 36 7a 7c 37 51 6e 31 7a 7c 32 44 49 51 32 44 2b 4d 33 51 3e 24 4d 51 32 44 49 51 32 44 2b 4d 30 51 37 36 2b 4d 33 31 53 36 32 44 74 31 32 44 7c 7a 7c 62 7a 7c 39 42 44 33 31 48 7a 7c 3e 31 44 72 45 d0 b8 24 43 33 31 37 36 6e 6f 2b 31 24 43 6e 6f 55 36 3c 51 31 24 43 4d 7a 7c 55 36 24 43 2b 4d 37 51 2b 4d 44 7e 30 51 36 7a 7c 5e 4d 55 36 58 72 6e 4d 44 33 6e 7c 51 4d 6e 6f 33 51 34 30 4d 73 42 43 2b 4d 33 31 73 7a 7c 33 31 74 36 2b 4d 33 31 42 43 49 d0 b8 33 31 37 36 55 36 33 31 42 43 6e 6f 37 51 55 36 6e 6f 24 43 4a 51 7a 7c 2b 4d 49 d0 b8 24 43 32 44 38 79 55 36 31 6e 6f 36 2b 4d 7a 7c 55 36 49 51 24 51 49 d0 b8 49 51 49 d0 b8 32 44 33 51 74 4a 44 3e 31 44 72 45 d0 b8 7a 7c 37 51 7a 7c 44 42 66 73 49 d0 b8 62 49 d0 b8 42 34 44 3e 31 44 72 Data Ascii: WM31S6z\|7Qn1z\|2DIQ2D+M3Q>$MQ2DIQ2D+M0Q76+M31S62Dt12D\|z\|bz\|9BD31Hz\|>1DrE$C3176no+1$CnoU6<Q1$CMz\|U6$C+M7Q+MD~0Q6z\|^MU6XrnMD3n\|QMno3Q40MsBC+M31sz\|31t6+M31BCI3176U631BCno7QU6no$CJQz\|+MI$C2D8yU61no6+Mz\|U6IQ$QIIQI2D3QtJD>1DrEz\|7Qz\|DBfsIbIB4D>1Dr
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 49 d0 b8 79 49 d0 b8 44 34 2b 6f 71 6d 33 31 3e 6f 7a 7c 49 31 44 39 49 31 7c 7a 7c 32 44 62 32 44 39 39 7c 33 31 3e 6f 32 44 79 32 44 44 6e 7e 7c 43 6d 3e 31 44 72 45 d0 b8 32 44 37 51 32 44 44 53 6f 76 49 d0 b8 5e 36 7a 7c 33 31 3d 6f 55 36 79 7a 7c 31 55 36 33 31 47 24 43 33 31 3e 6f 6e 6f 37 51 6e 6f 44 30 5a 4d 2b 77 2b 31 24 43 2b 77 55 36 79 7a 7c 4d 55 36 33 31 3e 6f 55 36 79 7a 7c 7c 55 36 36 32 44 49 d0 b8 7a 7c 49 51 24 51 2b 4d 33 31 34 6f 2b 4d 49 51 2b 4d 49 d0 b8 47 2b 4d 4d 2b 4d 30 51 34 6f 2b 4d 33 51 34 72 7c 38 58 3e 37 7c 44 33 6e 7c 51 36 32 44 30 51 67 32 44 33 51 3c 70 7c 73 7e 6f 2b 4d 73 57 6f 32 44 73 4f 6f 7a 7c 33 31 57 6f 2b 4d 62 2b 4d 4f 7e 7c 33 31 59 32 44 33 31 7e 6f 7a 7c 37 51 7a 7c 44 74 72 31 6f 49 Data Ascii: 7ff9IyID4+oqm31>oz\|I1D9I1\|z\|2Db2D99\|31>o2Dy2DDn~\|Cm>1DrE2D7Q2DDSovI^6z\|31=oU6yz\|1U631G$C31>ono7QnoD0ZM+w+1$C+wU6yz\|MU631>oU6yz\|\|U662DIz\|IQ$Q+M314o+MIQ+MIG+MM+M0Q4o+M3Q4r\|8X>7\|D3n\|Q62D0Qg2D3Q<p\|s~o+MsWo2DsOoz\|31Wo+Mb+MO~\|31Y2D31~oz\|7Qz\|Dtr1oI
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 4d 3c 51 2b 4d 7a 7c 3c 51 7a 7c 2b 4d 30 51 57 77 2b 4d 33 31 57 77 49 d0 b8 3c 51 49 d0 b8 2b 4d 62 2b 4d 37 49 36 3e 31 44 33 50 d0 b8 d0 b8 7a 7c 37 51 7a 7c 44 3c 57 7c 43 49 d0 b8 37 51 49 d0 b8 44 49 7a 31 5a 55 36 5e 4d 7a 7c 79 7a 7c 31 44 75 76 d0 b8 36 49 d0 b8 55 36 7a 7c 49 51 24 51 2b 4d 30 51 4f 77 2b 4d 33 31 4f 77 7a 7c 79 7a 7c 44 74 39 44 4d 44 75 35 71 33 31 4f 77 2b 4d 37 51 2b 4d 44 30 7e 31 7c 7a 7c 79 7a 7c 44 75 39 51 36 44 57 7e 43 44 3e 31 44 33 50 d0 b8 d0 b8 7a 7c 37 51 7a 7c 44 3c 57 7c 43 55 36 37 51 55 36 44 74 53 6f 44 7a 7c 37 51 7a 7c 44 72 6e 43 77 55 36 5e 4d 24 43 33 31 4f 77 6e 6f 79 24 43 31 6e 6f 36 7a 7c 55 36 24 43 49 51 24 51 2b 4d 33 31 4f 77 2b 4d 37 51 2b 4d 44 4a 33 7c 5a 55 36 30 51 7e 77 55 36 51 2b 4d 58 Data Ascii: M<Q+Mz\|<Qz\|+M0QWw+M31WwI<QI+Mb+M7I6>1D3Pz\|7Qz\|D<W\|CI7QIDIz1ZU6^Mz\|yz\|1Duv6IU6z\|IQ$Q+M0QOw+M31Owz\|yz\|Dt9DMDu5q31Ow+M7Q+MD0~1\|z\|yz\|Du9Q6DW~CD>1D3Pz\|7Qz\|D<W\|CU67QU6DtSoDz\|7Qz\|DrnCwU6^M$C31Ownoy$C1no6z\|U6$CIQ$Q+M31Ow+M7Q+MDJ3\|ZU60Q~wU6Q+MX
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 55 36 79 7a 7c 7c 24 43 36 32 44 49 d0 b8 7a 7c 49 51 24 51 2b 4d 33 31 7e 76 55 36 2b 31 55 36 3d 4e 2b 4d 30 51 57 76 2b 4d 33 31 57 76 7a 7c 37 51 7a 7c 44 4a 3d 6f 45 49 d0 b8 5e 4d 55 36 33 31 7e 76 6e 6f 2b 31 6e 6f 3e 6d 24 43 79 55 36 31 24 43 36 7a 7c 49 d0 b8 55 36 49 51 24 51 2b 4d 30 51 4f 76 2b 4d 33 31 57 76 49 d0 b8 37 51 49 d0 b8 44 4a 3d 6f 45 55 36 5e 4d 6e 6f 33 31 7e 76 32 71 2b 31 32 71 4f 45 24 43 79 6e 6f 31 24 43 36 49 d0 b8 55 36 6e 6f 49 51 24 51 2b 4d 30 51 3c 76 2b 4d 33 31 57 76 24 43 37 51 24 43 44 4a 3d 6f 45 55 36 5e 4d 6e 6f 33 31 7e 76 32 71 2b 31 32 71 3d 5e 7a 5a 79 6e 6f 31 7a 5a 36 24 43 55 36 6e 6f 49 51 24 51 2b 4d 30 51 75 76 2b 4d 33 31 57 76 2b 4d 37 51 2b 4d 44 4a 3d 6f 45 6e 6f 5e 4d 2b 77 33 31 7e 76 7a 5a 2b Data Ascii: U6yz\|\|$C62DIz\|IQ$Q+M31~vU6+1U6=N+M0QWv+M31Wvz\|7Qz\|DJ=oEI^MU631~vno+1no>m$CyU61$C6z\|IU6IQ$Q+M0QOv+M31WvI7QIDJ=oEU6^Mno31~v2q+12qOE$Cyno1$C6IU6noIQ$Q+M0Q<v+M31Wv$C7Q$CDJ=oEU6^Mno31~v2q+12q=^zZyno1zZ6$CU6noIQ$Q+M0Quv+M31Wv+M7Q+MDJ=oEno^M+w31~vzZ+
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 2b 68 44 7a 7c 5e 4d 24 43 3d 31 2b 77 37 51 2b 77 44 50 35 4d 6e 6f 37 51 6e 6f 44 57 3d 43 44 2b 77 5e 4d 55 36 3d 31 32 71 79 55 36 31 32 71 36 6e 6f 2b 77 55 36 49 51 24 51 49 d0 b8 79 24 43 31 49 d0 b8 36 32 44 7a 7c 24 43 49 51 24 51 2b 4d 70 51 2b 4d 79 55 36 44 39 49 31 7c 2b 77 79 49 d0 b8 31 55 36 51 55 36 79 55 36 44 30 5a 4d 44 50 35 4d 58 42 56 77 44 33 6e 7c 51 4d 6e 6f 33 51 4f 55 77 42 51 3e 6c 73 39 6c 2b 4d 67 74 6c 3d 31 2b 4d 37 51 2b 4d 44 33 50 d0 b8 d0 b8 7a 7c 37 51 7a 7c 44 24 44 43 2b 4d 30 51 74 6c 2b 4d 33 31 74 6c 2b 4d 37 51 2b 4d 44 50 2b 66 43 32 44 37 51 32 44 31 2b 4d 3d 51 44 74 56 6f 31 2b 4d 7a 7c 62 7a 7c 3e 6a 77 33 31 74 6c 32 44 37 51 32 44 44 50 2b 66 43 7a 7c 49 51 7a 7c 2b 4d 33 51 3c 7a 77 37 51 44 74 56 6f 31 Data Ascii: +hDz\|^M$C=1+w7Q+wDP5Mno7QnoDW=CD+w^MU6=12qyU612q6no+wU6IQ$QIy$C1I62Dz\|$CIQ$Q+MpQ+MyU6D9I1\|+wyI1U6QU6yU6D0ZMDP5MXBVwD3n\|QMno3QOUwBQ>ls9l+Mgtl=1+M7Q+MD3Pz\|7Qz\|D$DC+M0Qtl+M31tl+M7Q+MDP+fC2D7Q2D1+M=QDtVo1+Mz\|bz\|>jw31tl2D7Q2DDP+fCz\|IQz\|+M3Q<zw7QDtVo1
2024-04-26 04:11:58 UTC	1369	IN	Data Raw: 30 5a 4d 44 33 2b 71 4d 58 39 3c 71 44 33 6e 7c 51 4d 6e 6f 33 51 57 24 5a 42 51 3c 65 73 75 65 2b 4d 67 42 46 67 3d 46 67 72 46 67 34 46 33 31 42 45 6e 6f 37 51 6e 6f 44 4f 55 7c 36 32 44 5e 4d 7a 7c 51 49 d0 b8 33 31 75 65 6e 6f 37 51 6e 6f 44 2b 75 d0 b8 6c 32 71 5e 4d 24 43 79 24 43 31 44 42 49 d0 b8 66 36 6e 6f 32 71 24 43 49 51 24 51 55 36 30 51 42 46 55 36 6b 55 36 41 24 43 62 24 43 57 2b 5a 33 31 42 46 55 36 49 51 6a 51 32 71 6c 55 36 32 71 49 76 49 51 49 76 24 43 62 24 43 53 3d 5a 33 31 42 46 24 43 49 51 24 43 55 36 33 51 3c 3d 5a 49 51 44 33 6e 7c 51 55 36 79 49 d0 b8 44 74 56 31 4d 55 36 33 31 75 65 32 71 37 51 32 71 44 2b 75 d0 b8 6c 24 43 5e 4d 2b 77 79 2b 77 31 44 42 4f 7c 66 36 32 71 24 43 2b 77 49 51 24 51 55 36 3d 51 44 3d 74 71 44 55 36 Data Ascii: 0ZMD3+qMX9<qD3n\|QMno3QW$ZBQ<esue+MgBFg=FgrFg4F31BEno7QnoDOU\|62D^Mz\|QI31ueno7QnoD+ul2q^M$Cy$C1DBIf6no2q$CIQ$QU60QBFU6kU6A$Cb$CW+Z31BFU6IQjQ2qlU62qIvIQIv$Cb$CS=Z31BF$CIQ$CU63Q<=ZIQD3n\|QU6yIDtV1MU631ue2q7Q2qD+ul$C^M+wy+w1DBO\|f62q$C+wIQ$QU6=QD=tqDU6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49990	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	1379	OUT	GET /tracking.json HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
2024-04-26 04:11:58 UTC	1084	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb59fabaa539-MIA CF-Cache-Status: BYPASS Cache-Control: max-age=0, private, must-revalidate ETag: W/"5811becfceb9c687e1b7af2caddc8427" Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding, Origin access-control-allow-headers: Origin, Content-Type, Accept, Authorization, X-Auth-Token, X-Allow-Cookies, X-Block-Cookies access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE, HEAD Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /tracking.json x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xms-response: true x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:58 UTC	91	IN	Data Raw: 35 35 0d 0a 7b 22 65 6d 70 6c 6f 79 6d 65 6e 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 6d 65 72 63 68 61 6e 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 70 65 72 73 6f 6e 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 75 6e 69 74 5f 74 6f 6b 65 6e 22 3a 6e 75 6c 6c 7d 0d 0a Data Ascii: 55{"employment_token":null,"merchant_token":null,"person_token":null,"unit_token":null}
2024-04-26 04:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49991	172.217.2.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	945	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpyw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-qsKZObosavykOWyJ6-rPNQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:11:58 UTC	364	IN	Data Raw: 32 62 31 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b12<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 73 4b 5a 4f 62 6f 73 61 76 79 6b 4f 57 79 4a 36 2d 72 50 4e 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="qsKZObosavykOWyJ6-rPNQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 37 4c 50 50 4b 6e 5f 51 52 4d 79 4f 4e 4b 53 79 30 48 55 49 74 33 50 51 6a 35 4d 33 56 30 42 5a 6a 48 38 58 41 4b 36 37 69 61 5a 53 58 77 59 44 44 6c 35 73 52 59 56 34 47 47 35 39 73 78 54 66 6a 59 64 34 4f 47 36 78 6a 53 4d 33 6d 2d 56 4a 6a 44 38 79 6d 66 33 4c 4d 2d 4e 38 6e 30 61 44 6a 67 51 33 74 49 39 51 2d 59 57 6a 68 38 52 69 6f 2d 2d 31 56 34 68 5a 78 35 57 57 30 56 38 31 45 55 62 7a 62 61 43 36 43 58 32 52 6a 59 41 39 31 53 6b 77 59 71 54 77 67 43 37 6c 4e 67 74 38 33 49 56 2d 32 4b 45 6f 69 54 52 53 4a 4f 35 30 58 56 36 4b 5f 79 75 71 43 64 75 69 4c 6b 54 32 74 48 66 43 70 73 55 6c 79 6b 61 6f 66 39 72 58 37 6b 46 62 45 69 2d 35 47 30 58 52 78 4a 67 79 4e 35 6b 31 30 5f 65 55 58 4d 59 48 6d 4f 77 49 51 4a 32 72 61 6e 30 74 36 72 78 50 4f 34 67 Data Ascii: 7LPPKn_QRMyONKSy0HUIt3PQj5M3V0BZjH8XAK67iaZSXwYDDl5sRYV4GG59sxTfjYd4OG6xjSM3m-VJjD8ymf3LM-N8n0aDjgQ3tI9Q-YWjh8Rio--1V4hZx5WW0V81EUbzbaC6CX2RjYA91SkwYqTwgC7lNgt83IV-2KEoiTRSJO50XV6K_yuqCduiLkT2tHfCpsUlykaof9rX7kFbEi-5G0XRxJgyN5k10_eUXMYHmOwIQJ2ran0t6rxPO4g
2024-04-26 04:11:58 UTC	1255	IN	Data Raw: 6c 4f 36 56 75 5f 4d 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 71 73 4b 5a 4f 62 6f 73 61 76 79 6b 4f 57 79 4a 36 2d 72 50 4e 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 47 4d 33 51 79 63 6b 35 36 4e 32 4a 6e 62 44 5a 49 51 6b 56 50 61 32 4a 77 62 6d 45 79 51 57 39 54 4e 47 64 6b 62 47 70 36 4d 57 4a 6a 51 55 39 4f 57 57 78 59 63 6d 35 46 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 33 Data Ascii: lO6Vu_M"><script type="text/javascript" nonce="qsKZObosavykOWyJ6-rPNQ"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9GM3Qyck56N2JnbDZIQkVPa2JwbmEyQW9TNGdkbGp6MWJjQU9OWWxYcm5FLmpz\x22,\x22\x22,\x22c3
2024-04-26 04:11:58 UTC	630	IN	Data Raw: 52 56 51 54 59 78 56 32 31 54 65 44 4d 77 5a 31 4a 47 62 55 70 4b 61 32 70 58 63 6b 78 32 63 44 4a 59 56 32 4a 47 5a 56 56 47 57 6d 70 4e 53 54 68 58 4e 6b 64 4f 4e 33 6c 56 53 55 39 31 51 6a 56 6c 5a 56 6c 56 4d 6b 63 76 62 57 35 53 62 6a 42 77 55 48 4a 4d 64 58 46 6b 53 30 39 6b 63 57 39 53 5a 44 4d 76 57 56 68 78 53 46 56 42 62 6b 6c 70 64 44 64 79 55 58 68 54 5a 33 4e 49 64 6e 56 72 4b 30 64 69 56 45 46 59 64 44 51 7a 52 46 6c 6a 5a 6a 5a 4d 64 6e 6b 78 56 32 68 74 5a 6c 49 72 59 56 64 33 55 48 55 32 4d 53 39 48 53 6b 6c 68 4e 48 46 68 63 45 74 31 61 48 6b 35 62 44 46 53 62 47 67 76 52 30 67 34 65 55 39 6b 61 55 6c 77 5a 6d 35 33 5a 33 56 36 64 32 74 43 52 54 4e 76 4e 6b 31 33 64 46 5a 50 4b 30 70 45 54 6a 46 30 56 57 78 49 63 33 56 36 4e 55 52 51 65 Data Ascii: RVQTYxV21TeDMwZ1JGbUpKa2pXckx2cDJYV2JGZVVGWmpNSThXNkdON3lVSU91QjVlZVlVMkcvbW5SbjBwUHJMdXFkS09kcW9SZDMvWVhxSFVBbklpdDdyUXhTZ3NIdnVrK0diVEFYdDQzRFljZjZMdnkxV2htZlIrYVd3UHU2MS9HSklhNHFhcEt1aHk5bDFSbGgvR0g4eU9kaUlwZm53Z3V6d2tCRTNvNk13dFZPK0pETjF0VWxIc3V6NURQe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49992	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1364 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:539LqnexVKC1QM8z4hx3/W+qGDPiGqH3lIIX4CTD4dA= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	1364	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:11:59 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:11:59 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49993	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1460 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:qbGHgqCZvsSxv9PHwaX+UeJkDnJ2bywOykqZRnqe/aQ= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	1460	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:11:59 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:11:59 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49994	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1311 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:1oLVz2FHJVmmVWAbgMobTalYrddd6oApHM2qdMKx0Yo= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	1311	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:11:59 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:11:59 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49995	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	2520	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=Signup&v=Visited%20Onboarding&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047148981 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb5d28d03712-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg; path=/; expires=Fri, 26-Apr-24 04:41:58 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49997	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	1206	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:11:59 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb5d58cd0345-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:59 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49996	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	2476	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_click&page_click_action=Signup&page_click_description=Visited%20Onboarding&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047148992 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:58 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb5d28e00325-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=adx0pZdrOaJtxhlM0tcMgVNIdORdNs5KrvqWC8L8B0w-1714104718-1.0.1.1-ee2mLyIQ.6tyjWWKg07ggZLBxVWtzg4NkalTF7QZj8v3USPbfXQOiNUJO7wYsQ7272n.il1ZH575ohkaUNFcUg; path=/; expires=Fri, 26-Apr-24 04:41:58 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49998	34.111.140.246	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:58 UTC	613	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1283 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:58 UTC	1283	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 38 34 34 37 38 31 35 30 34 32 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 6a 73 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 31 39 34 2e 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 38 34 34 37 38 31 35 30 34 32 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 34 36 31 31 37 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 34 31 30 34 37 31 36 33 35 39 72 30 2e 39 37 30 32 36 36 35 35 31 32 37 31 34 39 34 31 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 72 69 62 75 74 Data Ascii: {"account_id":"8447815042","anonymize_ip":true,"client_name":"js","client_version":"0.194.0","enrich_decisions":true,"project_id":"8447815042","revision":"46117","visitors":[{"visitor_id":"oeu1714104716359r0.9702665512714941","session_id":"AUTO","attribut
2024-04-26 04:11:59 UTC	734	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://squareup.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Fri, 26 Apr 2024 04:11:59 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: 2a4a4829-a3b1-4124-93cc-6c9ff9dcb3ca x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50000	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	2471	OUT	POST /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/tl HTTP/1.1 Host: squareup.com Connection: keep-alive Content-Length: 8234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-kpsdk-im: CiQ0ZTM0YmQ0MC02NDUwLTQyODEtYTk0Yi03Y2M2NjM1MTlmMTU x-kpsdk-ct: 031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/octet-stream x-kpsdk-dt: 15tz039z39x2cy10x61fy79w40 x-kpsdk-v: j-0.0.0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/fp?x-kpsdk-v=j-0.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJ; KP_UIDz=031z27nYyzpOQsN1Qlf9JHYcla3R3NB8HKBkqIxao4XD4GeuXdxRiRe84MtQ0oCRUOoMD06cUqhhYH90p7Xvg9guhpkxWeoxjAL84rQoHFvHTRFzho04JavUeSuUs9h7SndGsXLPxCyMJcGVA48tcuExepn2XvUHUFbMQ6lLAJ
2024-04-26 04:11:59 UTC	8234	OUT	Data Raw: 00 02 42 78 f1 89 a5 39 20 00 44 2d 6f 18 e8 8c 78 14 e2 b8 fa e7 f0 2c 53 33 44 f9 6b 74 1b 90 e1 be 5d 2f 8f a5 da 84 1e 5f 6b 48 f8 ce 58 bf 59 73 17 b2 66 19 66 c6 32 ae 13 cc d3 cb e5 25 db ad 64 c4 82 c3 ac 33 95 df 01 ed 0a e8 ec fc af ef 3e 52 11 7a 12 c9 6f 98 96 e0 05 1b 4b 93 9b f9 bb 2c 73 b7 d8 39 40 f9 ea d5 5e 55 eb 04 2c 96 1a 80 e1 90 aa d4 70 3e 75 ee 7f 06 69 24 d6 f0 0a 61 4d bf 14 2b 8c 19 e2 b6 21 ad 24 57 4e d2 bf 6e ce 99 a8 c1 40 be fa 37 cf e3 42 10 7f 1b 7a e3 aa e6 78 ac 38 b5 ea 11 a6 7a d1 b0 26 6f 2d 7a fe b3 d1 1c 03 a3 72 07 69 51 83 ef 25 aa 30 38 d9 31 08 b7 69 a8 dd fb 46 1e 00 f6 a7 4a be 71 c2 60 d7 e2 50 b9 4d bf 87 1f c2 93 fa 86 c1 8c e6 50 5f 85 a2 1a 29 c2 65 11 85 8e 35 6f 67 f9 23 02 68 36 74 e9 c1 cd 32 c3 3f Data Ascii: Bx9 D-ox,S3Dkt]/_kHXYsff2%d3>RzoK,s9@^U,p>ui$aM+!$WNn@7Bzx8z&o-zriQ%081iFJq`PMP_)e5og#h6t2?
2024-04-26 04:11:59 UTC	1298	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: application/json; charset=utf-8 Content-Length: 15 Connection: close CF-Ray: 87a3bb5f4ae75c78-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://squareup.com Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Set-Cookie: KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; Max-Age=86400; Path=/; Expires=Sat, 27 Apr 2024 04:11:59 GMT; HttpOnly; Secure; SameSite=None access-control-allow-credentials: true access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-expose-headers: x-kpsdk-ct,x-kpsdk-r,x-kpsdk-c p3p: CP="This site does not specify a policy in the P3P header" pragma: no-cache Set-Cookie: KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; Max-Age=86400; Path=/; Expires=Sat, 27 Apr 2024 04:11:59 GMT; HttpOnly Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-kpsdk-cr: true
2024-04-26 04:11:59 UTC	255	IN	Data Raw: 78 2d 6b 70 73 64 6b 2d 63 74 3a 20 30 32 77 63 64 74 53 4a 38 46 57 72 63 75 44 6c 67 7a 61 62 61 42 74 49 49 6e 42 74 7a 72 36 37 7a 76 47 61 6d 4d 47 44 57 77 7a 30 33 66 7a 75 51 70 30 68 68 6c 79 41 7a 61 6a 41 70 41 46 49 66 4b 68 74 56 43 65 45 65 64 57 49 77 4a 6c 74 63 6f 42 38 68 34 74 34 42 77 71 79 4c 36 55 42 66 57 51 6f 6c 45 54 64 6e 42 32 34 4d 57 7a 36 31 54 47 56 71 72 68 37 4b 32 50 57 53 31 33 71 74 6f 51 65 61 71 32 57 34 73 33 7a 30 74 4f 7a 62 31 31 6d 35 67 72 71 31 62 74 64 72 35 6c 5a 61 49 57 37 31 65 50 53 6a 68 0d 0a 78 2d 6b 70 73 64 6b 2d 72 3a 20 31 2d 42 77 56 41 56 56 51 0d 0a 78 2d 6b 70 73 64 6b 2d 73 74 3a 20 31 37 31 34 31 30 34 37 31 39 36 33 35 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: x-kpsdk-ct: 02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjhx-kpsdk-r: 1-BwVAVVQx-kpsdk-st: 1714104719635Server: cloudflare
2024-04-26 04:11:59 UTC	15	IN	Data Raw: 7b 22 72 65 6c 6f 61 64 22 3a 74 72 75 65 7d Data Ascii: {"reload":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50003	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	3047	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1280%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047149291 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb610ebc097d-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=PAsmJW9P3pgaQEH9O0gvdguyofa2MFdM4TB7x2t2uKs-1714104719-1.0.1.1-ENTQmdT7qHwbmguuGjhWwaBJs3QIWDJdlV_sjG1ES.en3mFmACepT6TesAMud0GqG93ZAumSRbTfoQNt9W96dg; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50004	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	2565	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047149302 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb611f10b3e9-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=w9L.Cp2TOzoZLNBEXDaPazCu7wzYuOPRyZ4ShwOSigg-1714104719-1.0.1.1-iJleCmxsB1DeanuFPaH6TCwUB6J9Gli7i_wF.9NY6gtUazwwTlOtzgNY4seK.fxXkWT_zdKZGHoX7Ts1zMfFTg; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50005	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	2404	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_click&page_click_action=Signup&page_click_description=Visited%20Onboarding&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047148992 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb62486c747d-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=K3aTQcI4Ayn8ynoWYI5iEwEEiVzfHIWfJukVfcMLYV8-1714104719-1.0.1.1-Bs83Y6ioNyAgH_VZ7_EZ6bt7TDq45IsamcJHSZX6oiCfh9oEwgf3rD_yjUbUU8ElFFqoB2ZvnffoTgAs1mwFdA; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50006	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	2448	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=Signup&v=Visited%20Onboarding&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047148981 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb624d06288c-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=Atgvt4chd1Q8YqbzwQJqh42Jb7VSt4EGSaPx._kz_Ts-1714104719-1.0.1.1-TSMa43.pzNUSgbAfCwpfyNPVsDBGjVBB3._iDaryy35654Z1MiNWeaXiuPo44HvlSEX2mocTjX93H.mUhNqXxw; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50007	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	1206	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:11:59 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb62ae4ba546-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:11:59 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50009	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	3050	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%23%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1263%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047153713 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb61ae7d748f-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=dKvT5Z_lwO2rfUbgFJQdRuqw7hW4tmDpibsjx1fVoaY-1714104719-1.0.1.1-o27Td6muQ_yFSqGbFioA8MYnOHLfJoZSp5Hbh9sjiK1Pj3feFimtPhkc30YDLoJvVW3U4PGFPycV62hl3cw2pQ; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50008	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	2565	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153724 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=pPZ.wTxjF8byCgiiW0Hhvts1iZYp5eR7B_CmVii35Jw-1714104718-1.0.1.1-1VGkNDOGj.PQ7heLzsMufiK6DLZqqXwGIAHhbZx5gzCK3sFBUYYFJDhH1QlbdO8UNwoE1y8zTM0xLG8.6wFXlg
2024-04-26 04:11:59 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb61ad77a584-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=ZfeF7elDI7AtREcy_tLPM6c.dRi6mCh8msy6CGKlc4c-1714104719-1.0.1.1-XGxWSXHWu4co85iGarMayKU.66Gb0.tqbMl2Jp3gJNlNBjsvCdWGRHCrpd1p2tNMpqbaPAbHofUdEvadtTSiuw; path=/; expires=Fri, 26-Apr-24 04:41:59 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:11:59 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:11:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50013	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	541	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:11:59 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Thu, 25 Apr 2024 02:29:04 GMT x-ms-request-id: 6fb2eb97-a01e-0036-092a-97b4f3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 14162 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb632c937421-MIA
2024-04-26 04:11:59 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-04-26 04:11:59 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50012	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:11:59 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:11:59 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:00 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50015	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	1806	OUT	GET /149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/tl HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh
2024-04-26 04:12:02 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:02 GMT Content-Type: text/html Content-Length: 0 Connection: close CF-Ray: 87a3bb65bc728dde-MIA CF-Cache-Status: BYPASS Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct access-control-expose-headers: x-kpsdk-ct,x-kpsdk-r,x-kpsdk-c pragma: no-cache Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50017	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	2816	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1280%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047149291 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=w9L.Cp2TOzoZLNBEXDaPazCu7wzYuOPRyZ4ShwOSigg-1714104719-1.0.1.1-iJleCmxsB1DeanuFPaH6TCwUB6J9Gli7i_wF.9NY6gtUazwwTlOtzgNY4seK.fxXkWT_zdKZGHoX7Ts1zMfFTg
2024-04-26 04:12:00 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb662be0da77-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=2.aXL2BVRBut3Vt.2iyHB8Zk_JVvUuZfI879eCBU2LY-1714104720-1.0.1.1-TubJF9pcf2NEOdwI7ZvJVf1E2n0S5L39WX50LH9OAwJPHq_qH6ttnNMXF8nggD7z42kE_qyT1VIqjDfM9B9wpw; path=/; expires=Fri, 26-Apr-24 04:42:00 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50016	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	3273	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831 HTTP/1.1 Host: api.squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=PAsmJW9P3pgaQEH9O0gvdguyofa2MFdM4TB7x2t2uKs-1714104719-1.0.1.1-ENTQmdT7qHwbmguuGjhWwaBJs3QIWDJdlV_sjG1ES.en3mFmACepT6TesAMud0GqG93ZAumSRbTfoQNt9W96dg
2024-04-26 04:12:00 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb654a304960-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=E_yd7_L3ha0nXbIoOq_9i1UP6B8rY8B_0KY9RHT6Q3k-1714104720-1.0.1.1-Mubx1eqEQn7bSgMQ1vu9G49uAN0837TFR2bBMbxJcueXSOqS5YTaY_Da4HyeWSkrGrgsDj5yjxsfcts3SJo20g; path=/; expires=Fri, 26-Apr-24 04:42:00 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50018	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	2334	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047149302 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=w9L.Cp2TOzoZLNBEXDaPazCu7wzYuOPRyZ4ShwOSigg-1714104719-1.0.1.1-iJleCmxsB1DeanuFPaH6TCwUB6J9Gli7i_wF.9NY6gtUazwwTlOtzgNY4seK.fxXkWT_zdKZGHoX7Ts1zMfFTg
2024-04-26 04:12:00 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb654cf15731-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=x8nQdIZtwLEKaIPY8MJvpHYfQkBmQGa3F04EReBLhZY-1714104720-1.0.1.1-FmMuHC.uvYQc2vTwj61AxBuPk1IZpQejmoO0KBS0giWtfuTqGfGqiTZrMTm_Cm99E2Em.TCLM4AvwiHL4eS.nQ; path=/; expires=Fri, 26-Apr-24 04:42:00 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50019	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	2819	OUT	GET /1.0/log/pixel_tracking?avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&app_name=onboard&n=PageView&v=%2Fsignup%23%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&m=%7B%22screen_height%22%3A1024%2C%22screen_width%22%3A1280%2C%22path%22%3A%22%2Fsignup%22%2C%22referrer%22%3A%22%22%2C%22title%22%3A%22Sign%20up%20for%20Square%22%2C%22search%22%3A%22app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22full_url%22%3A%22https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue%22%2C%22base_url%22%3A%22https%3A%2F%2Fsquareup.com%22%2C%22browser_name%22%3A%22Chrome%22%2C%22browser_version%22%3A%22117.0.0.0%22%2C%22browser_major_version%22%3A%22117%22%2C%22os_name%22%3A%22Windows%22%2C%22os_version%22%3A%2210%22%2C%22window_width%22%3A1263%2C%22window_height%22%3A907%2C%22device_pixel_ratio%22%3A1%2C%22network_time%22%3A1082%2C%22rendering_time%22%3A2553%2C%22time_to_dom_ready%22%3A3635%7D&ln=js%2Feventstream&lv=2.1.8&nocache=17141047153713 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=ZfeF7elDI7AtREcy_tLPM6c.dRi6mCh8msy6CGKlc4c-1714104719-1.0.1.1-XGxWSXHWu4co85iGarMayKU.66Gb0.tqbMl2Jp3gJNlNBjsvCdWGRHCrpd1p2tNMpqbaPAbHofUdEvadtTSiuw
2024-04-26 04:12:00 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb66c8450325-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /1.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=heS7qFTJ1MTGgc.pMDtDH6GPU9c8gqu0UZ5Wv.jZshg-1714104720-1.0.1.1-B3YLAxluDGVXPUon7hSpHVUKwX5_n303DO5osbiNAWXPTJtKEIOeUjwrXll6mCVYa9LuW70F__vVzhI38WV_Zw; path=/; expires=Fri, 26-Apr-24 04:42:00 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50020	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	2334	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.1.8&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&browser_height=1024&browser_width=1280&catalog_name=page_view&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153724 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; __cf_bm=ZfeF7elDI7AtREcy_tLPM6c.dRi6mCh8msy6CGKlc4c-1714104719-1.0.1.1-XGxWSXHWu4co85iGarMayKU.66Gb0.tqbMl2Jp3gJNlNBjsvCdWGRHCrpd1p2tNMpqbaPAbHofUdEvadtTSiuw
2024-04-26 04:12:00 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb65e9f6d9b9-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=vdqtvvIV7yxnsU2WAbO8cs584klbnyoqlqZ_dUTM_o8-1714104720-1.0.1.1-QTjaTSzH6_5TyIASqL3cC8ZWzOnm9IMVHeallvNavXVGzhk_Ax.jzXmc7rvLjBqeMg4b7.sQepWb8UnZIshA9A; path=/; expires=Fri, 26-Apr-24 04:42:00 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:00 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50022	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	625	OUT	GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb67495ea530-MIA CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 56935 Cache-Control: public, max-age=86400 Expires: Sat, 27 Apr 2024 04:12:00 GMT Last-Modified: Tue, 19 Dec 2023 22:16:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: wVM1Ojzjl5J/+kTEeR6n+Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4d834ba2-801e-007c-024e-79177c000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-26 04:12:00 UTC	467	IN	Data Raw: 31 37 37 33 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 31 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 63 34 36 35 37 Data Ascii: 1773{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202301.2.0","OptanonDataJSON":"c4657
2024-04-26 04:12:00 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 38 31 30 36 34 36 31 65 2d 64 39 31 64 2d 34 33 35 39 2d 61 65 36 66 2d 31 66 63 33 36 30 39 37 32 66 65 32 22 2c 22 4e 61 6d 65 22 3a 22 45 55 2c 20 49 45 2c 20 51 75 65 62 65 63 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 6e 6f 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 6c 76 22 2c 22 68 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 61 74 22 2c 22 63 79 22 2c 22 61 78 22 2c 22 63 7a 22 2c Data Ascii: ":[{"Id":"8106461e-d91d-4359-ae6f-1fc360972fe2","Name":"EU, IE, Quebec","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","hu","se","mc","si","sk","mf","sm","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","ax","cz",
2024-04-26 04:12:00 UTC	1369	IN	Data Raw: 22 2c 22 65 68 22 2c 22 75 79 22 2c 22 75 7a 22 2c 22 76 61 22 2c 22 76 63 22 2c 22 65 72 22 2c 22 65 74 22 2c 22 76 65 22 2c 22 76 67 22 2c 22 76 69 22 2c 22 76 6e 22 2c 22 76 75 22 2c 22 66 6a 22 2c 22 66 6b 22 2c 22 66 6d 22 2c 22 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 67 65 22 2c 22 67 67 22 2c 22 67 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d Data Ascii: ","eh","uy","uz","va","vc","er","et","ve","vg","vi","vn","vu","fj","fk","fm","fo","wf","ga","ws","gd","ge","gg","gh","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm
2024-04-26 04:12:00 UTC	1369	IN	Data Raw: 55 53 22 3a 22 65 73 2d 55 53 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 65 6e 2d 47 42 22 3a 22 65 6e 2d 47 42 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 53 65 6c 6c 65 72 20 57 65 62 20 28 4e 6f 72 74 68 20 41 Data Ascii: US":"es-US","pl":"pl","da":"da","tr":"tr","en-GB":"en-GB","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Seller Web (North A
2024-04-26 04:12:00 UTC	1369	IN	Data Raw: 54 32 32 3a 31 36 3a 34 31 2e 35 39 31 34 37 37 37 34 38 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e Data Ascii: T22:16:41.591477748","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion
2024-04-26 04:12:00 UTC	68	IN	Data Raw: 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: rkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false}
2024-04-26 04:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50024	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	1206	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiNDcwMzlkOTM1YzgxNDUwNDgyMmQyMDBkMWE1MDkxNTQiLCJfY3NyZl90b2tlbiI6InN4LWRIWF9aWE9YejRZLVlRdmtDYXBqaHFJdXlvWkhRYUpFUjEzcVREN0EifQ%3D%3D--a8364069e175cde73244982418366c2ab0f80b654603526f73f45d4f19617b1d7aca71ca7e618b2af256e227ee1117adbcb912fe5ceeff94978ae36dbb70dcdf; _js_csrf=sx-dHX_ZXOXz4Y-YQvkCapjhqIuyoZHQaJER13qTD7A
2024-04-26 04:12:00 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb678d494c27-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:12:00 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50021	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	729	OUT	GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-medium.woff2?1713982826 HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	805	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 30768 Connection: close Date: Wed, 24 Apr 2024 21:01:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:57 GMT ETag: "2344124773c71bf4fa4ad407e7c3a467" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: atWcuzTlQnNh2Cipl4YYIafp5HoqUEFV Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f0d2db130f25377126d8fc517e82fa4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: a7xQXbyFSWMupVV8B6z0kwJ7hR6btFVuT451NiK6ahKiCW9K2NpJ2w== Age: 112217
2024-04-26 04:12:00 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 78 30 00 13 00 00 00 01 49 04 00 00 77 bf 00 01 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b 81 90 4c 1c 93 4a 06 60 00 88 36 08 1c 09 82 73 11 08 0a 83 a0 70 82 ec 7d 01 36 02 24 03 8f 60 0b 87 72 00 04 20 05 89 42 07 99 75 0c 81 04 3f 77 65 62 66 06 5b d0 29 71 45 74 c3 b4 30 54 85 df 6d 03 80 ae 78 af dd 47 99 8c 63 13 a0 db 00 0d 6f 2c b2 b2 a9 15 b2 f3 35 70 b7 c2 0a 57 47 d4 67 ff ff ff 9f 98 34 c6 58 db d0 dd 01 28 96 5f bd 55 70 08 47 48 23 32 51 2b 55 b4 3e 2a d5 44 18 46 6c 39 f6 46 81 7d 46 1e 08 aa 4e dc e4 2d 51 61 53 ae ef 2e cf d6 d8 88 3f b9 69 cb c3 72 0f 69 1c b2 ce ed 61 4e c7 69 4e 24 66 3b 2a 05 9d ed 40 0d 4a cf 74 d0 c4 ad 22 f7 6d 64 43 d7 cf 17 ba e9 5c Data Ascii: wOF2x0Iw?FFTMZLJ`6sp}6$`r Bu?webf[)qEt0TmxGco,5pWGg4X(_UpGH#2Q+U>DFl9F}FN-QaS.?iriaNiN$f;@Jt"mdC\
2024-04-26 04:12:00 UTC	12398	IN	Data Raw: 40 5b 72 9e 1a 61 ce 3e 4a 4e b3 bf 42 d7 c0 5c 59 d0 16 3b fa 35 d9 e4 30 b8 13 0b 4b 0b 8f b4 1e 99 76 62 5a 18 43 8e 4c 38 dc 11 30 3a 4e ac 45 bd c8 51 45 85 d7 99 8c 4a 39 07 c5 ef 54 65 9d 7e 21 ee fe 94 c9 ca 3e 37 a3 6e 46 30 58 1a 9c d6 29 3a 2b a7 38 54 3c b6 c2 1d c5 33 5b 66 35 9c ca 74 2b 8f 48 f6 7c 4d aa dc 59 ba 73 e9 7e 74 d5 26 e4 bb b5 0d 84 d1 98 24 ec c5 a8 07 2d d5 53 aa 67 0d 24 f3 c9 9a f3 56 1c b6 7c 93 0c ef ff 45 f3 a1 7a 93 ef 97 cc d1 d5 e2 c8 76 4d 4e ae 7d 1b 69 17 15 e1 44 50 77 91 b6 d9 73 72 35 69 ae 38 7a 1c 65 b5 80 9e 79 e5 8a 73 f3 d7 50 63 e9 71 2e c6 ff d1 8b e8 20 0a 9e 71 8f e2 59 5d b9 3a 9a 2b 86 95 42 ad 66 64 be 7d cb 88 a1 60 59 31 2e 9a ce c5 e8 76 27 bf 65 c0 9d 0c 44 f2 95 eb be d3 28 14 2e 00 7e 0f 83 37 Data Ascii: @[ra>JNB\Y;50KvbZCL80:NEQEJ9Te~!>7nF0X):+8T<3[f5t+H\|MYs~t&$-Sg$V\|EzvMN}iDPwsr5i8zeysPcq. qY]:+Bfd}`Y1.v'eD(.~7
2024-04-26 04:12:00 UTC	1986	IN	Data Raw: 3d 05 f0 65 c0 e5 00 9f b5 01 22 5f c9 95 cc c4 2f 04 6b f4 13 06 83 75 22 54 35 66 86 94 e1 c5 de c8 d1 ee 26 e5 b6 11 e6 1b 82 0e 60 f7 12 b8 08 34 a3 a9 99 2d cf 2f a0 cf 23 38 a0 07 8c 81 a1 6c 12 a8 4e 9e de 29 f1 9e d2 9b 1a ff 10 69 28 15 e9 db 77 82 81 df cb c0 ff 65 d5 bc 8c 05 d1 03 90 a0 4a 25 8d 1b 68 be a6 4c 25 d5 4a 26 2a e3 56 1e e9 4f d3 9c 13 b4 57 15 b3 f1 06 a7 a3 95 e7 30 dc 50 3d 70 08 99 a1 10 5c 72 74 a3 03 68 59 7a fe 44 cb 8c 2f cc 48 cc b5 a1 ca d7 19 8c 29 20 35 9e f7 a8 b5 00 02 3f c4 67 ed 98 33 ab a3 a4 7d 23 0a 1a a5 2f 50 44 9c dd 38 bd af 2a 73 97 95 29 c4 8b 58 21 f2 ad 90 1a 93 dd 1a d9 9d 2c a9 19 66 d5 1a e2 4e b7 64 c9 bc 05 f1 81 35 9c cc 13 ca 30 40 e8 3f db 47 88 c4 3d fb e3 8f 83 41 cf c6 95 6a a7 09 f1 d2 6d c7 Data Ascii: =e"_/ku"T5f&`4-/#8lN)i(weJ%hL%J&VOW0P=p\rthYzD/H) 5?g3}#/PD8s)X!,fNd50@?G=Ajm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50025	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:00 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50027	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=5599edc1-5889-4b5e-a3fd-a5f49e63c801&batch_time=1714104716292 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16031 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	16031	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 30 38 30 31 30 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 7d 2c 22 76 69 65 77 22 3a 7b 22 75 72 6c 22 3a 22 68 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104708010,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user"},"view":{"url":"h
2024-04-26 04:12:01 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 5599edc1-5889-4b5e-a3fd-a5f49e63c801 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:01 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 35 35 39 39 65 64 63 31 2d 35 38 38 39 2d 34 62 35 65 2d 61 33 66 64 2d 61 35 66 34 39 65 36 33 63 38 30 31 22 7d Data Ascii: {"request_id":"5599edc1-5889-4b5e-a3fd-a5f49e63c801"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50026	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=92923d4e-fa7f-4432-a971-8ee9a3ed95f7&batch_time=1714104718085 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 14657 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:00 UTC	14657	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 31 35 32 38 38 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104715288,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:01 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:00 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 92923d4e-fa7f-4432-a971-8ee9a3ed95f7 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:01 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 39 32 39 32 33 64 34 65 2d 66 61 37 66 2d 34 34 33 32 2d 61 39 37 31 2d 38 65 65 39 61 33 65 64 39 35 66 37 22 7d Data Ascii: {"request_id":"92923d4e-fa7f-4432-a971-8ee9a3ed95f7"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50029	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:00 UTC	3115	OUT	GET /2.0/log/pixel_tracking?app_name=onboard&u_library_name=js%2Feventstream&u_library_version=2.4.2&webpage_path=%2Fsignup&webpage_referrer=&webpage_title=Sign%20up%20for%20Square&webpage_search=app%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_full_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&webpage_base_url=https%3A%2F%2Fsquareup.com&browser_name=Chrome&browser_version=117.0.0.0&browser_major_version=117&os_name=Windows&os_version=10&device_screen_height=1024&device_screen_width=1280&browser_height=907&browser_width=1280&catalog_name=page_load_time&page_load_time_application_render_timestamp=1714104715295&page_load_time_navigation_start=1714104708009&page_load_time_fetch_start=1714104711012&page_load_time_domain_lookup_start=1714104711021&page_load_time_domain_lookup_end=1714104711021&page_load_time_connect_start=1714104711021&page_load_time_connect_end=1714104711323&page_load_time_secure_connection_start=1714104711021&page_load_time_request_start=1714104711323&page_load_time_response_start=1714104712090&page_load_time_response_end=1714104712094&page_load_time_dom_loading=1714104712116&page_load_time_dom_interactive=1714104714647&page_load_time_dom_content_loaded_event_start=1714104714647&subject_anonymous_token=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&nocache=17141047153831 HTTP/1.1 Host: api.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _ga=GA1.2.171990837.1714104719; _gid=GA1.2.775248889.1714104719; _gat=1; __cf_bm=E_yd7_L3ha0nXbIoOq_9i1UP6B8rY8B_0KY9RHT6Q3k-1714104720-1.0.1.1-Mubx1eqEQn7bSgMQ1vu9G49uAN0837TFR2bBMbxJcueXSOqS5YTaY_Da4HyeWSkrGrgsDj5yjxsfcts3SJo20g
2024-04-26 04:12:01 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:01 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb698f2d2876-MIA CF-Cache-Status: DYNAMIC Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding frame-options: DENY x-content-type-options: nosniff x-envoy-decorator-operation: /2.0/log/pixel_tracking x-frame-options: DENY x-sq-dc: aws x-sq-region: us-east-1 x-xss-protection: 1; mode=block Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 Set-Cookie: __cf_bm=eoUfhitfKvVysY_lEVDId9KsQI12EVz79eqo8P0UGxQ-1714104721-1.0.1.1-oXMYT4RCK6Sj4eYUauy7.vG1xWa.JCI.0YlJ61xZBRtRsGM2HDqiit368juc.GSBkgdY0Mrl9nV2VetqKP.t8w; path=/; expires=Fri, 26-Apr-24 04:42:01 GMT; domain=.api.squareup.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 04:12:01 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50033	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	427	OUT	GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/c4657020-c7d1-4a14-a091-267a7ee4863e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:01 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb6c796a4972-MIA CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 4715 Cache-Control: public, max-age=86400 Expires: Sat, 27 Apr 2024 04:12:01 GMT Last-Modified: Tue, 19 Dec 2023 22:16:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: wVM1Ojzjl5J/+kTEeR6n+Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 67937449-801e-001e-5fc9-32d55b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-26 04:12:01 UTC	468	IN	Data Raw: 31 37 37 33 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 31 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 63 34 36 35 37 Data Ascii: 1773{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202301.2.0","OptanonDataJSON":"c4657
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 3a 5b 7b 22 49 64 22 3a 22 38 31 30 36 34 36 31 65 2d 64 39 31 64 2d 34 33 35 39 2d 61 65 36 66 2d 31 66 63 33 36 30 39 37 32 66 65 32 22 2c 22 4e 61 6d 65 22 3a 22 45 55 2c 20 49 45 2c 20 51 75 65 62 65 63 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 6e 6f 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 6c 76 22 2c 22 68 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 61 74 22 2c 22 63 79 22 2c 22 61 78 22 2c 22 63 7a 22 2c 22 Data Ascii: :[{"Id":"8106461e-d91d-4359-ae6f-1fc360972fe2","Name":"EU, IE, Quebec","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","hu","se","mc","si","sk","mf","sm","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","ax","cz","
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 2c 22 65 68 22 2c 22 75 79 22 2c 22 75 7a 22 2c 22 76 61 22 2c 22 76 63 22 2c 22 65 72 22 2c 22 65 74 22 2c 22 76 65 22 2c 22 76 67 22 2c 22 76 69 22 2c 22 76 6e 22 2c 22 76 75 22 2c 22 66 6a 22 2c 22 66 6b 22 2c 22 66 6d 22 2c 22 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 67 65 22 2c 22 67 67 22 2c 22 67 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 Data Ascii: ,"eh","uy","uz","va","vc","er","et","ve","vg","vi","vn","vu","fj","fk","fm","fo","wf","ga","ws","gd","ge","gg","gh","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm"
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 53 22 3a 22 65 73 2d 55 53 22 2c 22 70 6c 22 3a 22 70 6c 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 65 6e 2d 47 42 22 3a 22 65 6e 2d 47 42 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 53 65 6c 6c 65 72 20 57 65 62 20 28 4e 6f 72 74 68 20 41 6d Data Ascii: S":"es-US","pl":"pl","da":"da","tr":"tr","en-GB":"en-GB","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Seller Web (North Am
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 32 32 3a 31 36 3a 34 31 2e 35 39 31 34 37 37 37 34 38 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 Data Ascii: 22:16:41.591477748","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion"
2024-04-26 04:12:01 UTC	67	IN	Data Raw: 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: kerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false}
2024-04-26 04:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50032	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	1435	OUT	GET /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk
2024-04-26 04:12:01 UTC	875	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 04:12:01 GMT Content-Type: application/json Content-Length: 141 Connection: close CF-Ray: 87a3bb6c4a21a575-MIA CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Origin, Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /services/squareup.onboarding.feature.FeatureService/FetchLaunchDarkly x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-sq-envoy-safe-auth-decision: NOT_FOUND x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:12:01 UTC	141	IN	Data Raw: 7b 0a 20 20 22 65 72 72 6f 72 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 49 4e 56 41 4c 49 44 5f 52 45 51 55 45 53 54 5f 45 52 52 4f 52 22 2c 0a 20 20 20 20 20 20 22 63 6f 64 65 22 3a 20 22 4e 4f 54 5f 46 4f 55 4e 44 22 2c 0a 20 20 20 20 20 20 22 64 65 74 61 69 6c 22 3a 20 22 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d Data Ascii: { "errors": [ { "category": "INVALID_REQUEST_ERROR", "code": "NOT_FOUND", "detail": "Resource not found." } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50034	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:01 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:01 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50035	172.217.2.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	855	OUT	GET /recaptcha/enterprise/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpyw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 04:12:01 GMT Date: Fri, 26 Apr 2024 04:12:01 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:01 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 04:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50037	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	554	OUT	GET /scripttemplates/202301.2.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: 0jjE9bRWjdK9YwiQScw/ZQ== Last-Modified: Fri, 17 Feb 2023 03:39:10 GMT x-ms-request-id: 5e491eb7-501e-000d-1111-1df157000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 26823 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb6e9c138da9-MIA
2024-04-26 04:12:01 UTC	554	IN	Data Raw: 37 63 37 32 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 31 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 Data Ascii: 7c72/** * onetrust-banner-sdk * v202301.2.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var o i
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 69 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 61 3d 61 7c 7c 50 72 6f 6d 69 73 65 29 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 72 28 6c 2e 6e 65 78 74 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 74 72 79 7b 72 28 6c 2e 74 68 72 6f 77 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 Data Ascii: )Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(i,s,a,l){return new(a=a\|\|Promise)(function(e,t){function o(e){try{r(l.next(e))}catch(e){t(e)}}function n(e){try{r(l.throw(e))}catch(e){t(e)}}function r(t)
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 28 5b 74 2c 65 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 2c 73 3d 30 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 73 3c 61 3b 73 2b 2b 2c 72 2b 2b 29 6e 5b 72 5d 3d 69 5b 73 5d 3b 72 65 74 75 72 6e 20 6e 7d 28 74 3d 6b 3d 6b 7c 7c 7b 7d 29 5b 74 2e 41 43 54 49 56 45 3d 30 5d 3d 22 41 43 54 49 56 45 Data Ascii: alue:t[0]?t[1]:void 0,done:!0}}([t,e])}}}function b(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arguments[t].length;var n=Array(e),r=0;for(t=0;t<o;t++)for(var i=arguments[t],s=0,a=i.length;s<a;s++,r++)n[r]=i[s];return n}(t=k=k\|\|{})[t.ACTIVE=0]="ACTIVE
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 43 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 43 28 74 29 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 65 2e Data Ascii: ypeof e\|\|"function"==typeof e)){var o=e.then;if(e instanceof c)return t._state=3,t._value=e,void C(t);if("function"==typeof o)return void f((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,C(t)}catch(e){h(t,e)}var n,r}function h(e,t){e.
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6f 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 28 74 2c 65 29 7d 2c 72 29 7d 69 5b 74 5d 3d 65 2c 30 3d 3d 2d 2d 73 26 26 6e 28 69 29 7d 63 61 74 63 68 28 65 29 7b 72 28 65 29 7d 7d 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 61 28 65 2c 69 5b 65 5d 29 7d 29 7d 2c 63 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 63 3f 74 3a 6e 65 77 20 63 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 63 2e 72 65 Data Ascii: o=e.then;if("function"==typeof o)return void o.call(e,function(e){a(t,e)},r)}i[t]=e,0==--s&&n(i)}catch(e){r(e)}}for(var e=0;e<i.length;e++)a(e,i[e])})},c.resolve=function(t){return t&&"object"==typeof t&&t.constructor===c?t:new c(function(e){e(t)})},c.re
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 72 3d 70 61 72 73 65 49 6e 74 28 6e 2e 6c 65 6e 67 74 68 2c 31 30 29 7c 7c 30 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 2c 73 2c 61 3d 74 5b 31 5d 7c 7c 30 3b 66 6f 72 28 30 3c 3d 61 3f 69 3d 61 3a 28 69 3d 72 2b 61 29 3c 30 26 26 28 69 3d 30 29 3b 69 3c 72 3b 29 7b 69 66 28 65 3d 3d 3d 28 73 3d 6e 5b 69 5d 29 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 Data Ascii: [o-1]=arguments[o];if(null==this)throw new TypeError("Array.prototype.includes called on null or undefined");var n=Object(this),r=parseInt(n.length,10)\|\|0;if(0===r)return!1;var i,s,a=t[1]\|\|0;for(0<=a?i=a:(i=r+a)<0&&(i=0);i<r;){if(e===(s=n[i])\|\|e!=e&&s!=s)
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 75 6e 64 65 66 69 6e 65 64 20 6f 72 20 6e 75 6c 6c 20 74 6f 20 6f 62 6a 65 63 74 22 29 3b 66 6f 72 28 76 61 72 20 6f 3d 4f 62 6a 65 63 74 28 65 29 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 21 3d 72 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 69 29 26 26 28 6f 5b 69 5d 3d 72 5b 69 5d 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 Data Ascii: ion(e,t){if(null==e)throw new TypeError("Cannot convert undefined or null to object");for(var o=Object(e),n=1;n<arguments.length;n++){var r=arguments[n];if(null!=r)for(var i in r)Object.prototype.hasOwnProperty.call(r,i)&&(o[i]=r[i])}return o},writable:!0
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 6c 6f 73 65 42 75 74 74 6f 6e 22 2c 53 5b 53 2e 43 6f 6e 66 69 72 6d 43 68 6f 69 63 65 42 75 74 74 6f 6e 3d 32 5d 3d 22 43 6f 6e 66 69 72 6d 43 68 6f 69 63 65 42 75 74 74 6f 6e 22 2c 53 5b 53 2e 41 63 63 65 70 74 41 6c 6c 3d 33 5d 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 53 5b 53 2e 52 65 6a 65 63 74 41 6c 6c 3d 34 5d 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 53 5b 53 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 53 5b 53 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 54 3d 50 3d 50 7c 7c 7b 7d 29 5b 54 2e 42 61 6e 6e Data Ascii: loseButton",S[S.ConfirmChoiceButton=2]="ConfirmChoiceButton",S[S.AcceptAll=3]="AcceptAll",S[S.RejectAll=4]="RejectAll",S[S.BannerSaveSettings=5]="BannerSaveSettings",S[S.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(T=P=P\|\|{})[T.Bann
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 57 5b 57 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 57 5b 57 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 28 58 3d 59 3d 59 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 58 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 24 3d 51 3d 51 7c 7c 7b 7d 29 2e Data Ascii: erence Center - Allow All"]=4]="Preference Center - Allow All",W[W["Preference Center - Reject All"]=5]="Preference Center - Reject All",W[W["Preference Center - Confirm"]=6]="Preference Center - Confirm",(X=Y=Y\|\|{}).Active="1",X.InActive="0",($=Q=Q\|\|{}).
2024-04-26 04:12:01 UTC	1369	IN	Data Raw: 64 61 74 65 22 2c 28 53 65 3d 62 65 3d 62 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 53 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 28 54 65 3d 50 65 3d 50 65 7c 7c 7b 7d 29 5b 54 65 2e 48 6f 73 74 4c 69 73 74 3d 30 5d 3d 22 48 6f 73 74 4c 69 73 74 22 2c 54 65 5b 54 65 2e 49 61 62 56 65 6e 64 6f 72 73 3d 31 5d 3d 22 49 61 62 56 65 6e 64 6f 72 73 22 2c 54 65 5b 54 65 2e 56 65 6e 64 6f 72 53 65 72 76 69 63 65 73 3d 32 5d 3d 22 56 65 6e 64 6f 72 53 65 72 76 69 63 65 73 22 2c 28 49 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 49 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 Data Ascii: date",(Se=be=be\|\|{}).granted="granted",Se.denied="denied",(Te=Pe=Pe\|\|{})[Te.HostList=0]="HostList",Te[Te.IabVendors=1]="IabVendors",Te[Te.VendorServices=2]="VendorServices",(Ie=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",Ie.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50038	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	727	OUT	GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-bold.woff2?1713982826 HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	805	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 30544 Connection: close Date: Wed, 24 Apr 2024 21:01:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:33:01 GMT ETag: "b156ac1a0b662cbb49fc81330c8e7b35" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: ODGsMQuaA6QDMbcrp8cCjXRKh.Pn7cKZ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 fae059afbeac18143c8bf2780b8d7052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: Ha7O9eDM-xPPKcBfwFzplbaUXcKMT2U3YU8XiXP7sSpYVI0xRMSKTg== Age: 112218
2024-04-26 04:12:01 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 77 50 00 13 00 00 00 01 4b d4 00 00 76 e1 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b 81 92 16 1c 93 4a 06 60 00 88 36 08 1c 09 82 73 11 08 0a 83 a5 74 82 f2 3e 01 36 02 24 03 8f 60 0b 87 72 00 04 20 05 88 42 07 99 75 0c 81 04 3f 77 65 62 66 06 5b db 2c 71 87 e9 36 85 73 5a 50 6e 1b 00 f4 76 f5 5d be e7 c9 38 36 e1 b6 d1 c8 5b e7 50 71 8f 2b d8 36 0d 67 b7 03 e5 19 75 29 cc fe ff ff ff 73 93 ca 18 fb 27 ed 3f 02 12 a6 59 5a 25 34 40 33 48 ed 26 06 22 cf ae 59 2a 23 f4 2c cd 40 ce a6 22 48 36 97 a5 47 57 6e e2 44 76 37 69 6a c4 6a e0 e1 1b e4 0a c9 c9 15 ee cf a5 8a 1d 12 2f 58 38 f5 20 d1 46 48 79 e2 87 6c 42 69 d5 76 09 aa 26 0f 8f 77 a8 be aa b3 7a c8 a6 c2 96 18 bd f7 Data Ascii: wOF2wPKv?FFTMZJ`6st>6$`r Bu?webf[,q6sZPnv]86[Pq+6gu)s'?YZ%4@3H&"Y*#,@"H6GWnDv7ijj/X8 FHylBiv&wz
2024-04-26 04:12:01 UTC	12398	IN	Data Raw: 97 c6 84 bd 65 39 3d 29 99 23 b9 75 b9 3b ba 76 04 ea 02 8f 80 5d 3f 92 c3 01 5d b3 a6 82 40 e0 2e 79 c0 46 e2 d3 35 7c 12 12 50 a8 30 6b 6c 6d be e5 a7 40 eb 27 fb 4a 7c 6b d5 b3 7a 3c 86 74 c3 b2 79 a0 41 83 3a 5d 1d f0 aa 8f 51 0c 54 4f 2f d8 ee db be 77 17 78 f0 e7 f1 cc 7e 6f ff f6 df 31 9c 00 9b f2 46 9b 04 c6 90 df 89 c4 bd 3b b1 35 a1 60 e4 c5 4b 67 c2 36 4d 4e ad b1 0f d8 31 a5 4f 09 b7 67 ee 2a 7a 4e fd 50 27 0b 99 65 70 a5 39 b6 62 e7 92 d0 b9 68 d2 5c ec 56 c7 3b 67 83 24 37 82 7a 8d d8 25 60 98 a2 a3 7d 8c 82 6e e2 35 6a 44 ae cf 88 b6 9a 1e 2e 46 52 d7 27 78 1e 6f 5a 92 30 37 9c f1 6d 63 a6 31 06 c3 d4 7f f3 09 cf 0d 4a f2 e6 54 88 5b 47 1d 25 03 48 3d fc cb a4 d7 28 04 d6 fe e3 b6 0b 70 c1 a7 6f e7 7f 99 da 3f 96 22 56 fd 3f 11 b4 ea 3f c8 Data Ascii: e9=)#u;v]?]@.yF5\|P0klm@'J\|kz<tyA:]QTO/wx~o1F;5`Kg6MN1Og*zNP'ep9bh\V;g$7z%`}n5jD.FR'xoZ07mc1JT[G%H=(po?"V??
2024-04-26 04:12:01 UTC	1762	IN	Data Raw: ea 4a bd 72 a4 dd d1 de b6 40 72 f8 eb 14 1f dd 01 80 13 e6 d7 d6 97 26 91 f3 d8 40 dd 6e 12 c9 0a 25 c9 55 72 8d 5f ef d1 47 a9 41 e8 9f c5 22 59 7f ef b8 41 70 24 0c 7a fa 20 1d be 93 7c be df cf 0e 0f e0 74 e0 a4 92 a4 8e a2 58 f1 73 5f cc 86 18 8b 45 8e 5f c5 5a 42 08 32 66 69 b1 67 a4 64 ee d7 a3 28 8a fd a5 f4 a8 38 80 af be e2 40 39 33 1b 05 d9 7d 8b 23 30 e6 ba fb a3 77 cb a7 98 f1 89 70 d2 17 7f 86 5b 82 4d bf 20 2d d1 ed f2 7c 81 84 15 29 56 31 9d 2a 7a b9 b2 e5 28 85 e0 4b e7 0d 21 1a ce 22 33 22 4d 15 44 b4 44 49 10 c9 d2 eb 64 32 f2 43 5f 24 5b 99 12 46 4e e4 0f 91 24 87 56 21 ad 02 53 8d 56 30 76 45 a2 83 9f aa 97 19 28 93 95 4f cb 92 c1 5f 92 04 08 05 2d bd 7c 99 24 66 8f 51 ac 40 86 a2 c9 ed c7 76 47 38 b6 3b 72 29 89 84 d1 ba 4a 33 ea 70 Data Ascii: Jr@r&@n%Ur_GA"YAp$z \|tXs_E_ZB2figd(8@93}#0wp[M -\|)V1*z(K!"3"MDDId2C_$[FN$V!SV0vE(O_-\|$fQ@vG8;r)J3p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50039	172.217.2.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	837	OUT	GET /js/bg/F3t2rNz7bgl6HBEOkbpna2AoS4gdljz1bcAONYlXrnE.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcdnHMcAAAAAN4MPNC9Ek-sdlNNDEd37YEN0Z8P&co=aHR0cHM6Ly9zcXVhcmV1cC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=5mlpag22kpyw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:02 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18282 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 14:48:31 GMT Expires: Fri, 25 Apr 2025 14:48:31 GMT Cache-Control: public, max-age=31536000 Age: 48210 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:02 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 79 29 7b 69 66 28 28 61 3d 28 79 3d 44 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 79 29 7c 7c 21 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 61 3d 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 50 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var b=function(a,y){if((a=(y=D.trustedTypes,null),!y)\|\|!y.createPolicy)return a;try{a=y.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P}
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 52 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 22 22 2b 52 7d 7d 28 44 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 61 79 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 72 65 74 75 72 6e 20 43 5b 79 5d 28 43 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 65 6e 74 3a 61 2c 6c 65 6e 67 74 68 3a 61 2c 70 72 6f 74 6f 74 79 70 65 3a 61 2c 73 70 6c 69 63 65 3a 61 2c 63 61 6c 6c 3a 61 2c 63 6f 6e 73 6f 6c 65 3a 61 2c 66 Data Ascii: eateScript(R)}:function(R){return""+R}}(D)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var ay=function(y,a){return C[y](C.prototype,{parent:a,length:a,prototype:a,splice:a,call:a,console:a,f
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 6b 4c 3d 52 2c 52 29 3c 3c 33 29 2d 34 2c 32 5d 5d 3b 74 72 79 7b 70 2e 55 5f 3d 70 42 28 52 2c 7a 24 28 70 2c 28 62 7c 30 29 2b 34 29 2c 7a 24 28 70 2c 62 29 29 7d 63 61 74 63 68 28 7a 29 7b 74 68 72 6f 77 20 7a 3b 7d 7d 70 2e 70 75 73 68 28 70 2e 55 5f 5b 4d 26 37 5d 5e 4b 29 7d 2c 42 3d 68 28 61 2c 33 30 31 29 29 3a 79 3d 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 2e 70 75 73 68 28 4b 29 7d 2c 50 26 26 79 28 50 26 32 35 35 29 2c 61 3d 44 2e 6c 65 6e 67 74 68 2c 50 3d 30 3b 50 3c 61 3b 50 2b 2b 29 79 28 44 5b 50 5d 29 7d 2c 64 2c 43 42 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 29 7b 31 30 34 3c 79 2e 76 2e 6c 65 6e 67 74 68 3f 66 28 5b 63 2c 33 36 5d 2c 30 2c 79 29 3a 28 79 2e 76 2e 70 75 73 68 28 79 2e 48 2e 73 6c 69 63 65 28 29 29 2c 79 2e 48 5b 34 31 35 5d Data Ascii: kL=R,R)<<3)-4,2]];try{p.U_=pB(R,z$(p,(b\|0)+4),z$(p,b))}catch(z){throw z;}}p.push(p.U_[M&7]^K)},B=h(a,301)):y=function(K){p.push(K)},P&&y(P&255),a=D.length,P=0;P<a;P++)y(D[P])},d,CB=function(y,a){104<y.v.length?f([c,36],0,y):(y.v.push(y.H.slice()),y.H[415]
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 68 28 28 4f 28 44 2c 28 57 72 28 28 50 3d 68 28 44 2c 34 31 35 29 2c 44 2e 58 26 26 50 3c 44 2e 44 3f 28 4f 28 44 2c 34 31 35 2c 44 2e 44 29 2c 43 42 28 44 2c 61 29 29 3a 4f 28 44 2c 34 31 35 2c 61 29 2c 44 29 2c 79 29 2c 34 31 35 29 2c 50 29 2c 44 29 2c 33 33 34 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 29 7b 69 66 28 34 31 35 3d 3d 61 7c 7c 34 30 35 3d 3d 61 29 79 2e 48 5b 61 5d 3f 79 2e 48 5b 61 5d 2e 63 6f 6e 63 61 74 28 44 29 3a 79 2e 48 5b 61 5d 3d 55 30 28 44 2c 79 29 3b 65 6c 73 65 7b 69 66 28 79 2e 78 4c 26 26 33 36 30 21 3d 61 29 72 65 74 75 72 6e 3b 34 34 36 3d 3d 61 7c 7c 34 39 38 3d 3d 61 7c 7c 33 34 35 3d 3d 61 7c 7c 31 36 35 3d 3d 61 7c 7c 33 35 31 3d 3d 61 7c 7c 33 34 39 3d 3d 61 7c 7c 33 30 31 3d 3d 61 7c 7c 32 38 36 3d 3d Data Ascii: h((O(D,(Wr((P=h(D,415),D.X&&P<D.D?(O(D,415,D.D),CB(D,a)):O(D,415,a),D),y),415),P),D),334)},O=function(y,a,D){if(415==a\|\|405==a)y.H[a]?y.H[a].concat(D):y.H[a]=U0(D,y);else{if(y.xL&&360!=a)return;446==a\|\|498==a\|\|345==a\|\|165==a\|\|351==a\|\|349==a\|\|301==a\|\|286==
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 7c 44 3e 3e 3e 32 39 2c 79 3d 79 3e 3e 3e 38 7c 79 3c 3c 32 34 2c 61 5e 3d 50 2b 36 34 31 2c 44 5e 3d 61 2c 79 2b 3d 50 7c 30 2c 50 3d 50 3c 3c 33 7c 50 3e 3e 3e 32 39 2c 79 5e 3d 42 2b 36 34 31 2c 50 5e 3d 79 3b 72 65 74 75 72 6e 5b 44 3e 3e 3e 32 34 26 32 35 35 2c 44 3e 3e 3e 31 36 26 32 35 35 2c 44 3e 3e 3e 38 26 32 35 35 2c 44 3e 3e 3e 30 26 32 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 72 68 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 7d 72 65 74 75 72 6e 20 50 3d 28 44 3d 28 42 3d 76 6f 69 64 20 30 2c 79 3d 49 79 28 79 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 70 26 26 28 61 26 26 47 24 28 61 29 2c Data Ascii: \|D>>>29,y=y>>>8\|y<<24,a^=P+641,D^=a,y+=P\|0,P=P<<3\|P>>>29,y^=B+641,P^=y;return[D>>>24&255,D>>>16&255,D>>>8&255,D>>>0&255,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},rh=function(y,a,D,P,B){function p(){}return P=(D=(B=void 0,y=Iy(y,function(K){p&&(a&&G$(a),
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 30 29 2c 57 2b 3d 48 2c 7a 2d 3d 48 3b 72 65 74 75 72 6e 20 4f 28 61 2c 34 31 35 2c 28 79 3d 52 2c 28 4b 7c 30 29 2b 28 44 7c 30 29 29 29 2c 79 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 29 7b 42 3d 74 68 69 73 3b 74 72 79 7b 56 42 28 44 2c 74 68 69 73 2c 79 2c 61 2c 50 29 7d 63 61 74 63 68 28 70 29 7b 78 28 74 68 69 73 2c 70 29 2c 61 28 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 4b 28 42 2e 52 29 7d 29 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 29 7b 66 6f 72 28 50 3d 28 44 3d 5b 5d 2c 28 79 7c 30 29 2d 31 29 3b 30 3c 3d 50 3b 50 2d 2d 29 44 5b 28 79 7c 30 29 2d 31 2d 28 50 7c 30 29 5d 3d 61 3e 3e 38 2a 50 26 32 35 35 3b 72 65 74 75 72 6e 20 44 7d 2c 57 72 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 Data Ascii: 0),W+=H,z-=H;return O(a,415,(y=R,(K\|0)+(D\|0))),y},l=function(y,a,D,P,B){B=this;try{VB(D,this,y,a,P)}catch(p){x(this,p),a(function(K){K(B.R)})}},X=function(y,a,D,P){for(P=(D=[],(y\|0)-1);0<=P;P--)D[(y\|0)-1-(P\|0)]=a>>8*P&255;return D},Wr=function(y,a,D,P,B,p
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 63 6f 6e 63 61 74 28 79 2e 73 5f 28 29 29 2c 44 29 2c 50 7d 29 5d 7d 2c 68 69 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 61 2c 44 2c 50 2c 42 2c 70 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 69 66 28 50 2e 4a 3d 3d 50 29 7b 69 66 28 50 2e 48 29 7b 76 61 72 20 52 3d 5b 62 7a 2c 44 2c 79 2c 76 6f 69 64 20 30 2c 42 2c 70 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 32 3d 3d 61 29 76 61 72 20 62 3d 4e 28 50 2c 66 61 6c 73 65 2c 28 75 28 52 2c 50 29 2c 66 61 6c 73 65 29 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 61 29 7b 76 61 72 20 4d 3d 21 50 2e 68 2e 6c 65 6e 67 74 68 3b 28 75 28 52 2c 50 29 2c 4d 29 26 26 4e 28 50 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 62 3d 42 72 28 50 2c 52 29 3b 72 65 74 75 72 6e 20 62 7d 42 26 26 70 26 26 42 2e 72 65 6d 6f 76 Data Ascii: concat(y.s_()),D),P})]},hi=function(y,a,D,P,B,p){function K(){if(P.J==P){if(P.H){var R=[bz,D,y,void 0,B,p,arguments];if(2==a)var b=N(P,false,(u(R,P),false));else if(1==a){var M=!P.h.length;(u(R,P),M)&&N(P,false,false)}else b=Br(P,R);return b}B&&p&&B.remov
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 6a 3d 28 51 28 61 2c 31 35 39 2c 28 51 28 61 2c 35 30 36 2c 28 51 28 61 2c 28 51 28 61 2c 28 61 2e 56 52 3d 28 4f 28 28 4f 28 61 2c 33 30 31 2c 5b 30 2c 30 2c 28 51 28 61 2c 34 36 33 2c 28 4f 28 61 2c 28 51 28 61 2c 31 34 33 2c 28 51 28 61 2c 28 51 28 61 2c 28 51 28 61 2c 28 4f 28 61 2c 33 34 39 2c 28 28 51 28 61 2c 28 51 28 61 2c 33 34 32 2c 28 4f 28 61 2c 28 61 2e 57 59 3d 28 61 2e 4c 3d 76 6f 69 64 20 30 2c 28 61 2e 48 3d 28 61 2e 79 52 3d 30 2c 44 3d 28 61 2e 56 3d 28 61 2e 6f 31 3d 42 2c 61 2e 5a 3d 76 6f 69 64 20 30 2c 61 2e 76 3d 5b 5d 2c 61 2e 4a 33 3d 28 61 2e 41 3d 6e 75 6c 6c 2c 5b 5d 29 2c 61 2e 68 3d 5b 5d 2c 61 2e 43 3d 30 2c 28 61 2e 59 4c 3d 28 61 2e 4f 3d 5b 5d 2c 66 61 6c 73 65 29 2c 61 29 2e 49 3d 76 6f 69 64 20 30 2c 61 2e 46 3d 30 2c Data Ascii: j=(Q(a,159,(Q(a,506,(Q(a,(Q(a,(a.VR=(O((O(a,301,[0,0,(Q(a,463,(O(a,(Q(a,143,(Q(a,(Q(a,(Q(a,(O(a,349,((Q(a,(Q(a,342,(O(a,(a.WY=(a.L=void 0,(a.H=(a.yR=0,D=(a.V=(a.o1=B,a.Z=void 0,a.v=[],a.J3=(a.A=null,[]),a.h=[],a.C=0,(a.YL=(a.O=[],false),a).I=void 0,a.F=0,
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 5d 2c 62 5b 33 5d 29 3a 32 28 29 2c 4f 28 52 2c 7a 2c 62 29 29 7d 29 2c 39 34 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 66 6f 72 28 7a 3d 28 6b 3d 28 4d 3d 6d 28 52 29 2c 76 72 28 52 29 29 2c 62 3d 30 2c 5b 5d 29 3b 62 3c 6b 3b 62 2b 2b 29 7a 2e 70 75 73 68 28 41 28 52 29 29 3b 4f 28 52 2c 4d 2c 7a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 29 7b 77 68 28 34 2c 52 29 7d 29 29 2c 39 39 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 62 2c 4d 2c 7a 2c 6b 29 7b 4f 28 52 2c 28 6b 3d 68 28 28 4d 3d 28 4d 3d 28 7a 3d 28 6b 3d 28 62 3d 6d 28 52 29 2c 6d 28 52 29 29 2c 6d 28 52 29 29 2c 6d 29 28 52 29 2c 68 28 52 2c 4d 29 29 2c 7a 3d 68 28 52 2c 7a 29 2c 52 29 2c 6b 29 2c 62 29 2c 68 69 28 7a 2c 4d 2c 6b 2c 52 29 29 7d 29 29 2c 30 29 5d Data Ascii: ],b[3]):2(),O(R,z,b))}),94),function(R,b,M,z,k){for(z=(k=(M=m(R),vr(R)),b=0,[]);b<k;b++)z.push(A(R));O(R,M,z)}),function(R){wh(4,R)})),99),[]),function(R,b,M,z,k){O(R,(k=h((M=(M=(z=(k=(b=m(R),m(R)),m(R)),m)(R),h(R,M)),z=h(R,z),R),k),b),hi(z,M,k,R))})),0)]
2024-04-26 04:12:02 UTC	1255	IN	Data Raw: 3d 28 6b 3d 28 28 6b 7c 30 29 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 5b 5d 29 2c 30 29 3b 54 3c 49 3b 54 2b 2b 29 56 5b 54 5d 7c 7c 28 4d 5b 54 5d 3d 55 28 6b 29 29 3b 66 6f 72 28 6b 3d 30 3b 6b 3c 49 3b 6b 2b 2b 29 56 5b 6b 5d 26 26 28 4d 5b 6b 5d 3d 6d 28 52 29 29 3b 66 6f 72 28 7a 3d 5b 5d 3b 62 2d 2d 3b 29 7a 2e 70 75 73 68 28 68 28 52 2c 6d 28 52 29 29 29 3b 51 28 52 2c 77 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 47 2c 59 2c 45 2c 4a 29 7b 66 6f 72 28 59 3d 28 47 3d 28 45 3d 5b 5d 2c 5b 5d 29 2c 30 29 3b 59 3c 49 3b 59 2b 2b 29 7b 69 66 28 21 28 4a 3d 4d 5b 59 5d 2c 56 5b 59 5d 29 29 7b 66 6f 72 28 3b 4a 3e 3d 45 2e 6c 65 6e 67 74 68 3b 29 45 2e 70 75 73 68 28 6d 28 5a 29 29 3b 4a 3d 45 5b 4a 5d 7d 47 2e 70 75 73 68 28 4a 29 Data Ascii: =(k=((k\|0)-1).toString(2).length,[]),0);T<I;T++)V[T]\|\|(M[T]=U(k));for(k=0;k<I;k++)V[k]&&(M[k]=m(R));for(z=[];b--;)z.push(h(R,m(R)));Q(R,w,function(Z,G,Y,E,J){for(Y=(G=(E=[],[]),0);Y<I;Y++){if(!(J=M[Y],V[Y])){for(;J>=E.length;)E.push(m(Z));J=E[J]}G.push(J)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50041	13.32.87.3	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	730	OUT	GET /builds/149f9b9/assets/fonts/public-web-styles/sqmarket/sqmarket-regular.woff2?1713982826 HTTP/1.1 Host: onboardfrontend-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://onboardfrontend-production-c.squarecdn.com/builds/149f9b9/assets/public-web-styles-proxy.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	805	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 29044 Connection: close Date: Wed, 24 Apr 2024 21:01:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Wed, 24 Apr 2024 18:32:58 GMT ETag: "84eba500a4ec29ccfadf1e9bff16b67f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=63072000, public, immutable Expires: Tue, 01 Jan 2030 00:00:00 GMT x-amz-version-id: gJ1Pl8kg24pfuVdj4AhNAWsehN1zChWO Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 982dd7ed309ab3025635ef6f0ff61e82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: Nu4E29MDVMvZ548ataQazoJI1BIUtnHsCJB6i1GilNgPSTIKF0CXUg== Age: 112218
2024-04-26 04:12:01 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 71 74 00 13 00 00 00 01 3b 88 00 00 71 06 00 01 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b e9 58 1c 93 4a 06 60 00 88 36 08 1a 09 82 73 11 08 0a 83 ac 6c 82 f7 72 01 36 02 24 03 8f 60 0b 87 72 00 04 20 05 89 50 07 99 75 0c 72 3f 77 65 62 66 06 5b cb 1b 71 01 bd 6d 2f 10 b7 03 bc b9 cf fd 99 27 e3 16 db dd 4a 17 58 28 22 0a d8 ad f0 6e 07 a9 37 7c 17 6b d9 ff ff a7 26 0d 39 ec 92 4e ee 5a b4 05 1b ec f7 20 e2 ee 16 c2 8c c5 6d 0c 98 cc e7 40 99 cb dc 6a 81 16 44 45 5e 73 55 56 5f 6c a5 6e 41 7d 78 4e 37 35 dc 2c 76 2a f1 95 2d 4e e5 54 d6 78 df bb d7 80 08 8c 16 41 25 96 73 04 c9 e2 fb e1 b8 c0 db 49 7c 6a 98 60 3f 5a 1e dd ad 4d 76 e6 f5 2a f7 39 4d f0 4c 57 b6 8c 51 f2 b7 75 Data Ascii: wOF2qt;q?FFTMZXJ`6slr6$`r Pur?webf[qm/'JX("n7\|k&9NZ m@jDE^sUV_lnA}xN75,v-NTxA%sI\|j`?ZMv9MLWQu
2024-04-26 04:12:01 UTC	12660	IN	Data Raw: f3 4b 23 85 d9 df 70 d9 f0 27 ef 01 0d f0 e1 c9 08 59 a0 72 70 64 57 34 da cd be e9 79 b2 bc e6 52 47 29 54 1d 70 9a 63 5a 73 bd ac 7e 2c 8f 4a cc fe 36 65 a6 40 e3 de 26 a0 85 a7 07 a1 58 13 f7 ac cf d0 94 4d 4c 7b 39 ed 92 56 3f 1e df 4d c0 d3 f4 8c 8c 04 b9 c4 d9 00 99 89 e5 73 67 18 61 94 e6 55 01 9d 84 bd df c4 1a 96 3d fe 7a 05 48 7c ae 2d ab 7c 52 9a 71 a2 2a 1f 38 72 f6 19 13 b5 2c 09 65 1e 4d e2 dd 6f 53 45 cb 53 8d 15 99 25 a9 ce 48 61 10 35 ea 2f 23 62 e3 f3 b7 fe 62 2b f1 4b 58 3a d9 7e 85 ca 5c 68 3d f6 a4 8b d3 bd 13 51 12 cb 0e 37 48 ec 70 93 5d fd 9a 80 80 b5 a0 2a af ca d6 ba c5 35 f8 4e c0 f5 1c 99 2d af ba a0 da 3a 78 5f 06 d7 fd bd a7 f9 f0 c6 c5 34 da e2 8d 87 2b 7b 5e b8 a1 ad 35 20 4e 4d d7 76 50 c6 f0 58 6d 18 b3 85 c9 68 79 0e 3d Data Ascii: K#p'YrpdW4yRG)TpcZs~,J6e@&XML{9V?MsgaU=zH\|-\|Rq8r,eMoSES%Ha5/#bb+KX:~\h=Q7Hp]5N-:x_4+{^5 NMvPXmhy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50045	13.226.52.128	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	615	OUT	GET /fonts/sqmarket/sqmarket-light.woff2 HTTP/1.1 Host: d1g145x70srn7h.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://onboardfrontend-production-c.squarecdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 32604 Connection: close Date: Thu, 25 Apr 2024 09:24:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Mon, 24 Aug 2015 16:41:35 GMT ETag: "b61b564a07d65d68488de3231bd0ac7b" x-amz-version-id: LUHxRWl4qPj2dk9lZN0Tv15hjYr5_yrB Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 5a334f8291e38975c678834100b052f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: d8mBDZDz9bd7erD2GgO1R_tSHuw7HU1vXHvs2yMRTGYBgsmEbzG9EQ== Age: 67656
2024-04-26 04:12:01 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 7f 5c 00 13 00 00 00 01 69 74 00 00 7e ef 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 5a 1b ec 7a 1c 93 4a 06 60 00 88 36 08 1a 09 82 73 11 08 0a 84 85 4c 83 cf 45 01 36 02 24 03 8f 60 0b 87 72 00 04 20 05 89 36 07 99 75 0c 72 3f 77 65 62 66 06 5b 26 49 71 03 39 77 5f a0 96 ee 04 f1 52 fb 67 d5 2b 15 c8 cd 33 a5 37 eb 4c 91 e1 fe f0 1a b6 bb 19 dc 4d 14 15 63 19 99 fd ff ff a7 26 15 19 33 cd 30 69 27 c8 50 94 ab fc 87 4c 64 b3 34 2c 21 1d 1c c5 ca e8 09 c7 ab 63 4f 38 ce ae a5 77 dc e8 9a 75 0d 0e 35 fd 68 de 92 4a 75 d7 43 d8 57 aa 27 7b f9 60 42 26 71 52 3d 1a ee e1 27 e6 82 b5 e2 b2 6f 1d ef 50 48 a6 32 59 73 67 36 15 06 ad f0 86 f4 f9 16 76 72 7e a9 d4 59 5a 2c 4d ad f6 7b Data Ascii: wOF2\it~?FFTMZzJ`6sLE6$`r 6ur?webf[&Iq9w_Rg+37LMc&30i'PLd4,!cO8wu5hJuCW'{`B&qR='oPH2Ysg6vr~YZ,M{
2024-04-26 04:12:01 UTC	15596	IN	Data Raw: c9 98 97 d8 f8 03 b6 1e b8 b6 a5 c7 01 f7 61 4c 1e f3 30 5a 1a a0 a9 4c 4e 8c 1f 68 5b 5c 3e cf 1e 85 c5 a3 3e 4e 51 4a 64 77 0c fd a9 b9 c0 73 5b 0a d7 cc ce 2b 80 d8 0c 03 6c 81 f5 01 a3 94 ca a5 16 18 0b d6 ef a0 a3 70 a9 61 c5 aa f5 ab ae 64 54 8c 1f 39 01 b9 a2 3b c7 e0 a8 ef c3 9b 46 8d e6 b4 13 c9 75 47 80 91 8d 47 16 b3 21 d0 59 08 d8 d9 ed 8a 0e 17 92 2c 27 26 bf 1c 5f 4f c3 f2 fa 0c 30 4e c2 c5 df e6 91 20 a6 b0 92 aa c5 28 72 1b 25 46 d3 51 af 62 d0 41 d3 74 0d fb 57 ae 02 27 87 38 f2 f6 d8 12 c0 7f 63 b8 f2 92 e9 9a 94 68 7d f4 d6 0c 80 81 5b 35 fa fd ed d5 c9 6c fb 92 df 2a e7 bd 9d 5a 51 38 79 33 74 77 1a b5 e1 57 f8 db 93 a2 e7 c9 73 e3 4f 37 c9 cf 8b 62 75 8b bf 48 f3 86 9a 3f 3a fc 87 b2 94 f3 f3 d7 e8 aa c2 33 e5 66 47 71 b1 a6 52 e3 85 Data Ascii: aL0ZLNh[\>>NQJdws[+lpadT9;FuGG!Y,'&_O0N (r%FQbAtW'8ch}[5l*ZQ8y3twWsO7buH?:3fGqR
2024-04-26 04:12:01 UTC	624	IN	Data Raw: 6a 8f 40 29 b9 ee 24 b9 a9 eb 8a 73 dd 54 b5 d7 8a 27 69 c8 85 0d 5e a4 81 eb 0a dd 08 71 d4 d7 63 e7 dc 18 e5 b9 5a b6 f1 2e 5e 74 67 3e 1b 7a a0 be dc 8c e6 c1 6f 0d 63 a0 1a ff d3 a0 a1 01 df 9b 4d c9 36 6b bc e2 f2 84 73 c7 ec 48 ee d8 ae 28 d5 31 55 8e 6e 3b ae 3c 35 7d 0e 74 6a 9f 97 70 1c ff f4 e1 b7 ab 9b 23 b4 88 c2 33 a4 12 0c 19 04 f4 8b 7f 49 5e ad e9 a2 b8 0b cc b3 96 5d 7f e0 79 65 df 05 82 e0 a0 a3 7f b2 dc 0c 95 c4 97 46 12 f6 ff e6 99 61 04 3a 0e 9c 18 78 e1 42 e2 4d b2 0a bb 1c 7d a5 d8 04 c1 2a 1f 5a ce 6b 09 a5 82 13 5c 80 94 e6 ae e4 af 84 62 7e 48 39 da 0e a1 22 13 2c 4d 72 b3 e9 82 03 e3 41 b7 e3 8b e6 03 17 f0 d9 6a 40 71 ab 27 27 49 8c 24 92 3b 83 78 3d 38 2a 46 1a ea 93 c0 c9 f9 dc 04 cc 58 f9 2d b9 10 52 fe 10 52 88 21 a5 62 48 Data Ascii: j@)$sT'i^qcZ.^tg>zocM6ksH(1Un;<5}tjp#3I^]yeFa:xBM}Zk\b~H9",MrAj@q''I$;x=8FX-RR!bH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50040	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=9ffce09e-447e-415a-b9ce-85d4b38ee980&batch_time=1714104719434 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:01 UTC	16202	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 31 34 39 32 31 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104714921,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:02 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:02 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 9ffce09e-447e-415a-b9ce-85d4b38ee980 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:02 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 39 66 66 63 65 30 39 65 2d 34 34 37 65 2d 34 31 35 61 2d 62 39 63 65 2d 38 35 64 34 62 33 38 65 65 39 38 30 22 7d Data Ascii: {"request_id":"9ffce09e-447e-415a-b9ce-85d4b38ee980"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50043	173.194.213.157	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:01 UTC	900	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&uid=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&gjid=998327875&_gid=775248889.1714104719&_u=YEBAAEAAAAAAACAAI~&z=1941767255 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://squareup.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:02 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://squareup.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 04:12:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:02 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50048	192.184.68.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	947	OUT	GET /quant.js HTTP/1.1 Host: secure.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:02 UTC	295	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:02 GMT Content-Type: application/javascript Content-Length: 23678 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=604800 Etag: "bvEECQq4Zy6gU9J/qv1O6Q==" Expires: Fri, 03 May 2024 04:12:02 GMT Vary: Accept-Encoding
2024-04-26 04:12:02 UTC	16089	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 63 61 73 74 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 71 63 53 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 28 65 2b 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 25 31 36 7c 30 3b Data Ascii: /* Copyright (c) 2008-2023, Quantcast Corp. https://www.quantcast.com/legal/license /!function(){"use strict";var e="qcSes";function t(){var e=r();return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(function(t){var n=(e+16Math.random())%16\|0;
2024-04-26 04:12:02 UTC	7589	IN	Data Raw: 5b 65 5d 26 26 28 74 3d 54 65 5b 65 5d 2c 6e 2e 70 75 73 68 28 74 29 2c 64 65 6c 65 74 65 20 54 65 5b 65 5d 29 3b 69 66 28 31 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 79 28 6e 5b 30 5d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 79 28 6e 5b 65 5d 29 7d 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 5b 5d 3b 66 6f 72 28 6e 3d 6a 65 2e 73 6c 69 63 65 28 30 29 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 6e 5b 65 5d 2c 59 28 74 29 7c 7c 72 2e 70 75 73 68 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 6e 65 28 29 3b 65 6c 73 65 20 66 6f 72 28 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 3d 72 5b 65 5d 2c 43 65 2e 70 Data Ascii: [e]&&(t=Te[e],n.push(t),delete Te[e]);if(1==n.length&&y(n[0]),n.length>1)for(e=0;e<n.length;e++)y(n[e])}},re=function(){var e,t,n,r=[];for(n=je.slice(0),e=0;e<n.length;e++)t=n[e],Y(t)\|\|r.push(t);if(0===r.length)ne();else for(e=0;e<r.length;e++)t=r[e],Ce.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50060	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	631	OUT	GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/438838e0-2800-4410-b44b-37a1d246db65/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:02 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb763e68a4e5-MIA CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 14092 Cache-Control: public, max-age=86400 Expires: Sat, 27 Apr 2024 04:12:02 GMT Last-Modified: Tue, 19 Dec 2023 22:17:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: SfmR1IKy+4DfuSJpGldjBg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a9ea1d52-d01e-0003-4d08-7cd8e7000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-26 04:12:03 UTC	467	IN	Data Raw: 31 64 62 38 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 70 72 65 66 Data Ascii: 1db8{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Cookie pref
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 6f 75 72 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 2e 20 59 6f 75 20 6d 61 79 20 6f 70 74 20 6f 75 74 20 6f 66 20 63 65 72 74 61 69 6e 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 74 68 69 72 64 20 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2c 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 6f 73 65 20 74 68 61 74 20 61 72 65 20 73 74 72 69 63 74 6c 79 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 6f 75 72 20 53 65 72 76 69 63 65 Data Ascii: technologies described in our Cookie Policy. This information might be about you, your preferences, or your device. You may opt out of certain categories of third party cookies, other than those that are strictly necessary to provide you with our Service
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 4d 61 6e 61 67 65 20 63 6f 6f 6b 69 65 73 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 Data Ascii: es":false,"LastReconsentDate":null,"BannerTitle":"Manage cookies","ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","Ve
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 75 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 74 68 65 20 53 65 72 76 69 63 65 73 2e 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 75 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f Data Ascii: t":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These technologies are necessary for us to provide you with the Services.","GroupDescriptionOTT":"These technologies are necessary for us to provide yo
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 66 64 37 35 62 33 61 2d 32 36 34 38 2d 34 63 37 31 2d 62 33 35 35 2d 62 Data Ascii: e the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"1fd75b3a-2648-4c71-b355-b
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 65 76 65 6c 6f 70 65 72 2e 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 64 64 5f 63 6f 6f 6b 69 65 5f 74 65 73 74 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 61 65 38 64 36 36 34 2d 61 34 38 33 2d 34 35 39 33 2d 61 66 65 34 2d 38 35 66 66 35 39 66 65 63 38 63 38 22 2c 22 4e 61 6d 65 22 3a 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 22 48 6f 73 74 22 3a 22 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 Data Ascii: eveloper.squareup.com","IsSession":false,"Length":"0","description":"dd_cookie_test","DurationType":1,"category":null,"isThirdParty":false},{"id":"eae8d664-a483-4593-afe4-85ff59fec8c8","Name":"OptanonConsent","Host":"squareup.com","IsSession":false,"Lengt
2024-04-26 04:12:03 UTC	304	IN	Data Raw: 69 74 68 20 73 69 74 65 20 73 65 63 75 72 69 74 79 20 69 6e 20 70 72 65 76 65 6e 74 69 6e 67 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 20 61 74 74 61 63 6b 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 77 65 65 62 6c 79 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 77 65 65 62 6c 79 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 35 32 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 62 63 31 61 63 64 31 35 Data Ascii: ith site security in preventing Cross-Site Request Forgery attacks.","DurationType":1,"category":null,"isThirdParty":false}]},{"HostName":"weebly.com","DisplayName":"weebly.com","HostId":"H52","Description":"","PrivacyPolicy":"","Cookies":[{"id":"bc1acd15
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 77 65 65 62 6c 79 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 65 67 69 73 74 65 72 73 20 61 6e 6f 6e 79 6d 69 73 65 64 20 75 73 65 72 20 64 61 74 61 2c 20 73 75 63 68 20 61 73 20 49 50 20 61 64 64 72 65 73 73 2c 20 67 65 6f 67 72 61 70 68 69 63 61 6c 20 6c 6f 63 61 74 69 6f 6e 2c 20 76 69 73 69 74 65 64 20 77 65 62 73 69 74 65 73 2c 20 61 6e 64 20 77 68 61 74 20 61 64 73 20 74 68 65 20 75 73 65 72 20 68 61 73 20 63 6c 69 63 6b 65 64 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 Data Ascii: 7ff9itor","Host":"weebly.com","IsSession":true,"Length":"0","description":"Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked.","DurationType":1,"category":null,"isThirdParty":f
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 20 75 6e 69 71 75 65 20 6e 75 6d 62 65 72 20 77 68 69 63 68 20 69 73 20 61 6c 73 6f 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 61 63 63 6f 75 6e 74 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 5d 2c 22 50 75 72 70 6f 73 65 49 64 22 3a 22 33 36 38 46 45 44 39 36 2d 30 32 32 38 2d 34 41 39 44 2d 42 39 31 32 2d 39 38 30 35 31 46 32 35 35 44 44 37 22 2c 22 43 75 73 74 6f 6d 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 31 22 2c 22 47 72 6f 75 70 49 64 22 3a 22 37 66 66 63 39 32 64 33 2d 30 62 38 35 2d 34 66 62 38 2d 61 38 62 62 Data Ascii: unique number which is also an identifier for an associated Google Analytics account.","DurationType":1,"category":null,"isThirdParty":false}]}],"PurposeId":"368FED96-0228-4A9D-B912-98051F255DD7","CustomGroupId":"C0001","GroupId":"7ffc92d3-0b85-4fb8-a8bb
2024-04-26 04:12:03 UTC	1369	IN	Data Raw: 6f 20 6d 65 61 73 75 72 65 20 75 73 65 20 61 63 72 6f 73 73 20 6f 75 72 20 53 65 72 76 69 63 65 73 2e 20 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 68 65 6c 70 20 75 73 20 75 6e 64 65 72 73 74 61 6e 64 20 69 66 20 79 6f 75 20 68 61 76 65 20 75 73 65 64 20 6f 75 72 20 53 65 72 76 69 63 65 73 20 62 65 66 6f 72 65 20 73 6f 20 77 65 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 75 6e 69 71 75 65 20 75 73 65 72 73 20 77 65 20 72 65 63 65 69 76 65 2e 20 54 68 65 79 20 61 6c 73 6f 20 68 65 6c 70 20 75 73 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 6c 6f 6e 67 20 79 6f 75 20 73 70 65 6e 64 20 75 73 69 6e 67 20 6f 75 72 20 53 65 72 76 69 63 65 73 20 61 6e 64 20 66 72 6f 6d 20 77 68 65 72 65 20 79 6f 75 20 68 Data Ascii: o measure use across our Services. These technologies help us understand if you have used our Services before so we can identify the number of unique users we receive. They also help us understand how long you spend using our Services and from where you h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50055	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	1469	OUT	GET /activityi;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	1443	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9628652.fls.doubleclick.net/activityi;dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50059	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1419 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:I3uNIIyF+yamJkQH8uh6ovcbk6d/OerlQXd1Pj3UeGM= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:02 UTC	1419	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:12:03 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:03 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50061	13.226.52.68	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	971	OUT	GET /send-post-request.js HTTP/1.1 Host: martech-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 592 Connection: close Date: Fri, 26 Apr 2024 04:12:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 27 Jun 2023 23:54:42 GMT ETag: "8ee775801179e9b10599e53c07e9a0cf" x-amz-server-side-encryption: AES256 x-amz-version-id: 0zXqWkrShPZAMBLdrnMxOW0tgH.9rOvW Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: tgxrPke2hx-ZJW6yrBQgehOk69tyQQk-0hERVtSNCz7FSNqh_GQ-aA==
2024-04-26 04:12:03 UTC	592	IN	Data Raw: 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6e 6f 2d 75 6e 75 73 65 64 2d 76 61 72 73 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 50 6f 73 74 52 65 71 75 65 73 74 28 64 61 74 61 2c 20 65 6e 64 70 6f 69 6e 74 2c 20 62 65 61 72 65 72 54 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 78 68 72 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 74 72 69 6e 67 69 66 69 65 64 44 61 74 61 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 3b 0a 0a 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 65 6e 64 70 6f 69 6e 74 29 3b 0a 20 20 20 20 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 27 43 6f 6e 74 65 6e 74 2d 54 Data Ascii: // eslint-disable-next-line no-unused-varsfunction sendPostRequest(data, endpoint, bearerToken) { const xhr = new XMLHttpRequest(); const stringifiedData = JSON.stringify(data); xhr.open('POST', endpoint); xhr.setRequestHeader('Content-T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50062	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-26 04:12:03 UTC	1522	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-26 04:12:03 UTC	13	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 Data Ascii: /*** Copyrig
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 Data Ascii: ht (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web se
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 Data Ascii: console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterator:"@@itera
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 Data Ascii: .prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,config
2024-04-26 04:12:03 UTC	344	IN	Data Raw: 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e Data Ascii: :i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})();return k.
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 62 3d 61 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 2c 63 3d 2f 5e 5b 2b 2d 5d 3f 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 24 2f 2c 64 3d 22 6e 75 6d 62 65 72 22 2c 65 3d 22 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 22 2c 67 3d 7b 41 45 44 3a 31 2c 41 52 53 3a 31 2c 41 55 44 3a 31 2c 42 4f 42 3a 31 2c 42 52 4c 3a 31 2c 43 41 44 3a 31 2c 43 48 46 3a 31 2c 43 4c 50 3a 31 2c 43 4e 59 3a 31 2c 43 4f 50 3a 31 Data Ascii: unction(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsLogging"),b=a.logUserError,c=/^[+-]?\d+(\.\d+)?$/,d="number",e="currency_code",g={AED:1,ARS:1,AUD:1,BOB:1,BRL:1,CAD:1,CHF:1,CLP:1,CNY:1,COP:1
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 66 29 7b 66 3d 66 2e 76 61 6c 69 64 61 74 69 6f 6e 53 63 68 65 6d 61 3b 76 61 72 20 68 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 66 29 69 66 28 6a 2e 63 61 6c 6c 28 66 2c 69 29 29 7b 76 61 72 20 6b 3d 66 5b 69 5d 2c 6c 3d 62 5b 69 5d 3b 69 66 28 6b 29 7b 69 66 28 6b 2e 69 73 52 65 71 75 69 72 65 64 21 3d 6e 75 6c 6c 26 26 21 6a 2e 63 61 6c 6c 28 62 2c 69 29 29 72 65 74 75 72 6e 20 6d 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 61 2c 70 61 72 61 6d 3a 69 2c 74 79 70 65 3a 22 52 45 51 55 49 52 45 44 5f 50 41 52 41 4d 5f 4d 49 53 53 49 4e 47 22 7d 29 3b 69 66 28 6b 2e 74 79 70 65 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 6b 2e 74 79 70 65 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 76 61 72 20 6f 3d 21 30 3b 73 Data Ascii: }function q(a,b,f){f=f.validationSchema;var h=[];for(var i in f)if(j.call(f,i)){var k=f[i],l=b[i];if(k){if(k.isRequired!=null&&!j.call(b,i))return m({eventName:a,param:i,type:"REQUIRED_PARAM_MISSING"});if(k.type!=null&&typeof k.type==="string"){var o=!0;s
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 74 69 6f 6e 73 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 62 20 69 6e 20 61 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 26 26 61 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 62 5d 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 63 3b 72 65 74 75 72 6e 28 63 3d 61 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 29 5b 62 5d 2e 61 70 70 6c 79 28 63 2c 65 29 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 57 65 61 6b 6c 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 63 6f 65 72 63 65 41 72 67 73 21 3d 6e 75 6c 6c 3f 74 68 69 73 2e 5f 63 6f 65 72 63 65 41 72 67 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 75 6c 6c 3b 72 65 74 75 Data Ascii: tions),function(b){if(b in a._subscriptions&&a._subscriptions[b]!=null){var c;return(c=a._subscriptions)[b].apply(c,e)}else return null})}},{key:"triggerWeakly",value:function(){var a=this._coerceArgs!=null?this._coerceArgs.apply(this,arguments):null;retu
2024-04-26 04:12:03 UTC	1500	IN	Data Raw: 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 64 65 6c 61 79 49 6e 4d 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6e 75 6d 62 65 72 28 29 29 2c 65 6e 61 62 6c 65 45 76 65 6e 74 53 75 70 70 72 65 73 73 69 6f 6e 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 65 6e 61 62 6c 65 42 61 63 6b 75 70 54 69 6d 65 6f 75 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 2c 65 78 70 65 72 69 6d 65 6e 74 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 66 62 63 50 61 72 61 6d 73 43 6f 6e 66 69 67 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 70 61 72 61 6d 73 3a 62 2e 61 72 72 61 Data Ascii: rce;a=b.objectWithFields({delayInMs:b.allowNull(b.number()),enableEventSuppression:b.allowNull(b["boolean"]()),enableBackupTimeout:b.allowNull(b["boolean"]()),experiment:b.allowNull(b.string()),fbcParamsConfig:b.allowNull(b.objectWithFields({params:b.arra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50063	13.32.115.116	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	949	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10159 Connection: close Date: Thu, 25 Apr 2024 22:19:08 GMT Last-Modified: Thu, 25 Apr 2024 19:49:47 GMT ETag: "d6f0435164aefe6cf324147b77c7b6bb" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3f72a8b28c744ea2f627e9f8a8ac8282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: ZN5iUWw8jgcMi3qMvNdAv3LFn0OOHqeQxJeIUiN8dpWF4nbA1lhzRw== Age: 21175
2024-04-26 04:12:03 UTC	10159	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50064	13.226.53.63	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	950	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 01:20:21 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Via: 1.1 fe8af35c363442c3ecc406bdb489733e.cloudfront.net (CloudFront), 1.1 6c9274205f681e6532f5f293414b8d2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P3 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: EHbBMKyJSLMdOZTSNy5YSRT3cX35FvsJ_JcxCqdWJqYSaz18jCsyoA== Age: 10302
2024-04-26 04:12:03 UTC	13289	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50065	108.157.173.109	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:02 UTC	532	OUT	GET /shim.js?id=mVfPI-96JuPi HTTP/1.1 Host: cdn.sprig.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	629	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 149004 Connection: close Date: Thu, 25 Apr 2024 23:53:58 GMT Last-Modified: Wed, 17 Apr 2024 20:58:27 GMT ETag: "a3d2c5f139c21bc84fa435f2252271d3" x-amz-server-side-encryption: AES256 x-amz-version-id: xSZ.KXFJkBrvWYG0cevIt4QyeAWD2hXn Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fe8af35c363442c3ecc406bdb489733e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P3 X-Amz-Cf-Id: qoshbRzYplylXTv4Db1DG1KAqpZ3ptO_jgBAZB5kki8j_KmsF-vZVw== Age: 15485 cross-origin-resource-policy: cross-origin
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 63 34 33 34 66 31 35 31 2d 39 33 36 39 2d 35 31 30 39 2d 62 33 64 30 2d 37 61 31 39 32 39 33 65 62 66 39 63 22 29 7d 63 61 74 63 68 28 Data Ascii: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="c434f151-9369-5109-b3d0-7a19293ebf9c")}catch(
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 6f 6e 73 74 20 6f 3d 7b 6f 6b 3a 21 31 2c 72 65 70 6f 72 74 45 72 72 6f 72 3a 21 31 7d 3b 69 66 28 73 69 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 60 55 73 65 72 4c 65 61 70 20 2d 20 24 7b 6f 69 7d 60 29 2c 6f 3b 74 72 79 7b 74 2e 68 65 61 64 65 72 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 55 65 28 29 2c 74 2e 68 65 61 64 65 72 73 29 3b 63 6f 6e 73 74 20 61 3d 61 77 61 69 74 20 66 65 74 63 68 28 65 2c 74 29 3b 69 66 28 61 2e 73 74 61 74 75 73 3d 3d 3d 34 32 39 29 69 66 28 21 47 74 26 26 21 72 7c 7c 69 29 7b 47 74 3d 21 30 3b 63 6f 6e 73 74 20 6c 3d 61 2e 68 65 61 64 65 72 73 2e 68 61 73 28 22 72 61 74 65 6c 69 6d 69 74 2d 72 65 73 65 74 22 29 3f 4e 75 6d 62 65 72 28 61 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 72 61 74 65 6c 69 Data Ascii: onst o={ok:!1,reportError:!1};if(si)return console.info(`UserLeap - ${oi}`),o;try{t.headers=Object.assign(Ue(),t.headers);const a=await fetch(e,t);if(a.status===429)if(!Gt&&!r\|\|i){Gt=!0;const l=a.headers.has("ratelimit-reset")?Number(a.headers.get("rateli
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 6c 74 28 73 2c 65 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 20 73 2e 72 65 66 3d 3d 3d 30 26 26 73 2e 66 69 6e 61 6c 69 7a 65 28 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 29 7b 72 65 74 75 72 6e 20 59 2e 69 64 7c 7c 28 59 2e 69 64 3d 2b 2b 4f 6f 29 2c 2b 2b 59 2e 61 77 61 69 74 73 2c 59 2e 65 63 68 6f 65 73 2b 3d 6b 69 2c 59 2e 69 64 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 29 7b 72 65 74 75 72 6e 21 21 59 2e 61 77 61 69 74 73 26 26 28 2d 2d 59 2e 61 77 61 69 74 73 3d 3d 30 26 26 28 59 2e 69 64 3d 30 29 2c 59 2e 65 63 68 6f 65 73 3d 59 2e 61 77 61 69 74 73 2a 6b 69 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 65 29 7b 72 65 74 75 72 6e 20 59 2e 65 63 68 6f 65 73 26 26 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5a 74 3f 28 63 74 28 29 2c Data Ascii: lt(s,e,n,r);return s.ref===0&&s.finalize(),a}function ct(){return Y.id\|\|(Y.id=++Oo),++Y.awaits,Y.echoes+=ki,Y.id}function ve(){return!!Y.awaits&&(--Y.awaits==0&&(Y.id=0),Y.echoes=Y.awaits*ki,!0)}function cn(e){return Y.echoes&&e&&e.constructor===Zt?(ct(),
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 74 68 65 6e 28 28 29 3d 3e 28 53 2e 6c 65 6e 67 74 68 3e 30 7c 7c 41 26 26 74 3d 3d 3d 6f 72 29 26 26 61 2e 6d 75 74 61 74 65 28 7b 74 72 61 6e 73 3a 72 2c 74 79 70 65 3a 22 64 65 6c 65 74 65 22 2c 6b 65 79 73 3a 53 2c 63 72 69 74 65 72 69 61 3a 41 7d 29 2e 74 68 65 6e 28 6b 3d 3e 67 28 53 2e 6c 65 6e 67 74 68 2c 6b 29 29 29 2e 74 68 65 6e 28 28 29 3d 3e 6d 2e 6c 65 6e 67 74 68 3e 79 2b 66 26 26 77 28 79 2b 75 29 29 7d 29 7d 3b 72 65 74 75 72 6e 20 77 28 30 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 69 66 28 70 2e 6c 65 6e 67 74 68 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 4a 74 28 22 45 72 72 6f 72 20 6d 6f 64 69 66 79 69 6e 67 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6f 62 6a 65 63 74 73 22 2c 70 2c 64 2c 68 29 3b 72 65 74 75 72 6e 20 6d 2e 6c 65 6e 67 74 68 7d 29 Data Ascii: then(()=>(S.length>0\|\|A&&t===or)&&a.mutate({trans:r,type:"delete",keys:S,criteria:A}).then(k=>g(S.length,k))).then(()=>m.length>y+f&&w(y+u))})};return w(0).then(()=>{if(p.length>0)throw new Jt("Error modifying one or more objects",p,d,h);return m.length})
2024-04-26 04:12:03 UTC	14808	IN	Data Raw: 6f 72 65 4e 61 6d 65 73 29 2e 66 6f 72 45 61 63 68 28 45 3d 3e 76 5b 45 5d 3d 3d 6e 75 6c 6c 26 26 5f 2e 64 62 2e 64 65 6c 65 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 45 29 29 7d 28 66 2e 5f 63 66 67 2e 64 62 73 63 68 65 6d 61 2c 62 29 2c 75 72 28 63 2c 5b 63 2e 54 72 61 6e 73 61 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2c 79 6e 28 63 2c 5b 63 2e 54 72 61 6e 73 61 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 5d 2c 63 2e 5f 73 74 6f 72 65 4e 61 6d 65 73 2c 63 2e 5f 64 62 53 63 68 65 6d 61 29 2c 75 2e 73 63 68 65 6d 61 3d 63 2e 5f 64 62 53 63 68 65 6d 61 7d 29 7d 29 2c 79 28 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 76 61 72 20 66 2c 62 3b 62 3d 70 2c 24 28 66 3d 67 29 2e 66 6f 72 45 61 63 68 28 76 3d 3e 7b 62 2e 64 62 2e 6f 62 6a 65 63 74 53 74 6f 72 Data Ascii: oreNames).forEach(E=>v[E]==null&&_.db.deleteObjectStore(E))}(f._cfg.dbschema,b),ur(c,[c.Transaction.prototype]),yn(c,[c.Transaction.prototype],c._storeNames,c._dbSchema),u.schema=c._dbSchema})}),y().then(()=>{var f,b;b=p,$(f=g).forEach(v=>{b.db.objectStor
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 3d 42 26 26 45 65 28 42 5b 4a 65 5d 29 2c 71 72 3d 50 26 26 45 65 28 50 5b 4a 65 5d 29 3b 58 28 6a 74 2c 71 72 29 21 3d 3d 30 26 26 28 6a 74 21 3d 6e 75 6c 6c 26 26 54 28 6a 74 29 2c 71 72 21 3d 6e 75 6c 6c 26 26 54 28 71 72 29 29 7d 29 7d 6b 2e 69 6e 64 65 78 65 73 2e 66 6f 72 45 61 63 68 28 57 29 7d 28 6d 2c 73 2c 53 2c 76 29 7d 65 6c 73 65 20 69 66 28 62 29 7b 63 6f 6e 73 74 20 53 3d 7b 66 72 6f 6d 3a 62 2e 6c 6f 77 65 72 2c 74 6f 3a 62 2e 75 70 70 65 72 7d 3b 79 2e 61 64 64 28 53 29 2c 77 2e 61 64 64 28 53 29 7d 65 6c 73 65 20 77 2e 61 64 64 28 6e 29 2c 79 2e 61 64 64 28 6e 29 2c 73 2e 69 6e 64 65 78 65 73 2e 66 6f 72 45 61 63 68 28 53 3d 3e 6d 28 53 2e 6e 61 6d 65 29 2e 61 64 64 28 6e 29 29 3b 72 65 74 75 72 6e 20 45 7d 29 7d 7d 2c 75 3d 28 7b 71 75 Data Ascii: =B&&Ee(B[Je]),qr=P&&Ee(P[Je]);X(jt,qr)!==0&&(jt!=null&&T(jt),qr!=null&&T(qr))})}k.indexes.forEach(W)}(m,s,S,v)}else if(b){const S={from:b.lower,to:b.upper};y.add(S),w.add(S)}else w.add(n),y.add(n),s.indexes.forEach(S=>m(S.name).add(n));return E})}},u=({qu
2024-04-26 04:12:03 UTC	10660	IN	Data Raw: 74 77 65 65 6e 28 5b 5a 2c 65 5d 2c 5b 5a 2c 74 5d 29 2e 74 6f 41 72 72 61 79 28 29 7d 2c 47 65 2e 52 65 70 6c 61 79 47 65 74 45 76 65 6e 74 73 42 65 74 77 65 65 6e 29 2c 6e 7d 2c 5f 61 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 44 61 74 65 2c 69 3d 72 2e 73 65 74 4d 69 6e 75 74 65 73 28 72 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 2b 28 6e 3f 3f 70 61 29 29 3b 72 65 74 75 72 6e 20 44 2e 65 76 65 6e 74 73 2e 77 68 65 72 65 28 22 5b 73 65 73 73 69 6f 6e 49 64 2b 74 69 6d 65 73 74 61 6d 70 5d 22 29 2e 62 65 74 77 65 65 6e 28 5b 5a 2c 65 5d 2c 5b 5a 2c 74 5d 29 2e 6d 6f 64 69 66 79 28 7b 65 78 70 69 72 65 64 41 74 3a 69 7d 29 7d 2c 53 61 3d 65 3d 3e 44 2e 63 68 75 6e 6b 55 70 6c 6f 61 64 73 2e 61 64 64 28 7b 2e 2e 2e 65 2c 73 65 73 73 Data Ascii: tween([Z,e],[Z,t]).toArray()},Ge.ReplayGetEventsBetween),n},_a=(e,t,n)=>{const r=new Date,i=r.setMinutes(r.getMinutes()+(n??pa));return D.events.where("[sessionId+timestamp]").between([Z,e],[Z,t]).modify({expiredAt:i})},Sa=e=>D.chunkUploads.add({...e,sess
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 65 74 54 69 6d 65 73 74 61 6d 70 3a 73 2c 74 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 63 61 70 74 75 72 65 50 61 72 61 6d 73 3a 69 7d 29 7d 2c 47 61 3d 61 73 79 6e 63 28 29 3d 3e 7b 74 72 79 7b 69 66 28 6b 65 26 26 70 61 72 73 65 49 6e 74 28 6b 65 29 3e 30 29 7b 63 6f 6e 73 74 20 65 3d 61 77 61 69 74 20 78 61 28 29 3b 65 2e 6c 65 6e 67 74 68 26 26 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 61 73 79 6e 63 20 74 3d 3e 7b 61 77 61 69 74 20 44 2e 70 65 6e 64 69 6e 67 43 61 70 74 75 72 65 73 2e 64 65 6c 65 74 65 28 74 2e 75 75 69 64 29 2c 61 77 61 69 74 20 6d 73 28 74 2e 63 61 70 74 75 72 65 50 61 72 61 6d 73 2c 74 2e 63 61 6e 55 70 6c 6f 61 64 29 7d 29 29 2c 6b 65 3d 28 70 61 72 73 65 49 6e 74 28 6b 65 29 2d 65 Data Ascii: etTimestamp:s,timestamp:Date.now(),captureParams:i})},Ga=async()=>{try{if(ke&&parseInt(ke)>0){const e=await xa();e.length&&await Promise.all(e.map(async t=>{await D.pendingCaptures.delete(t.uuid),await ms(t.captureParams,t.canUpload)})),ke=(parseInt(ke)-e
2024-04-26 04:12:03 UTC	16384	IN	Data Raw: 61 72 69 61 74 69 6f 6e 73 2e 22 29 2c 21 31 7d 7d 7d 63 6f 6e 73 74 20 6a 72 3d 6e 65 77 20 6d 63 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6a 72 29 3b 63 6f 6e 73 74 20 79 63 3d 22 21 6f 70 74 69 6d 69 7a 65 6c 79 5f 65 78 70 65 72 69 6d 65 6e 74 73 5f 22 3b 63 6c 61 73 73 20 67 63 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 56 28 74 68 69 73 2c 22 5f 6f 70 74 69 6d 69 7a 65 6c 79 44 61 74 61 22 2c 7b 7d 29 7d 73 65 74 4f 70 74 69 6d 69 7a 65 6c 79 45 78 70 65 72 69 6d 65 6e 74 28 74 2c 6e 3d 21 30 29 7b 69 66 28 21 74 7c 7c 74 79 70 65 6f 66 20 74 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 7b 65 78 70 65 72 69 6d 65 6e 74 73 3a 72 7d 3d 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 Data Ascii: ariations."),!1}}}const jr=new mc;Object.freeze(jr);const yc="!optimizely_experiments_";class gc{constructor(){V(this,"_optimizelyData",{})}setOptimizelyExperiment(t,n=!0){if(!t\|\|typeof t!="object")return!1;const{experiments:r}=t;try{return n&&Object.keys
2024-04-26 04:12:03 UTC	8848	IN	Data Raw: 65 74 55 73 65 72 49 64 22 2c 73 2e 65 72 72 6f 72 29 29 3b 72 65 74 75 72 6e 7d 69 21 3d 3d 77 69 6e 64 6f 77 2e 55 73 65 72 4c 65 61 70 2e 76 69 73 69 74 6f 72 49 64 26 26 79 73 28 29 2c 69 65 28 22 75 69 64 22 2c 72 29 7d 2c 61 73 79 6e 63 20 73 65 74 50 61 72 74 6e 65 72 41 6e 6f 6e 79 6d 6f 75 73 49 64 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 55 73 65 72 4c 65 61 70 2e 64 65 62 75 67 4d 6f 64 65 26 26 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 5b 44 45 42 55 47 5d 20 53 70 72 69 67 20 73 65 74 50 61 72 74 6e 65 72 41 6e 6f 6e 79 6d 6f 75 73 49 64 22 2c 72 29 2c 72 3d 3d 6e 75 6c 6c 29 7b 63 6f 6e 73 74 20 69 3d 60 5b 53 70 72 69 67 5d 20 2d 20 49 6e 76 61 6c 69 64 20 70 61 72 74 6e 65 72 41 6e 6f 6e 79 6d 6f 75 73 49 64 20 24 7b 72 7d 60 3b 72 65 74 Data Ascii: etUserId",s.error));return}i!==window.UserLeap.visitorId&&ys(),ie("uid",r)},async setPartnerAnonymousId(r){if(window.UserLeap.debugMode&&console.info("[DEBUG] Sprig setPartnerAnonymousId",r),r==null){const i=`[Sprig] - Invalid partnerAnonymousId ${r}`;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50070	18.239.225.71	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	957	OUT	GET /roi/cnxtag-min.js?id=310748 HTTP/1.1 Host: js.cnnx.link Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	401	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 5842 Connection: close Cache-Control: max-age=600 Date: Fri, 26 Apr 2024 04:12:02 GMT Via: 1.1 google, 1.1 0ef42f53ed23ebaff9c61683fdfd544a.cloudfront.net (CloudFront) Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: bsKGDubzpZFm8lnLHwvabMtGMqTuxDQcUu4NKcKh_-n8lmkuJmMLVA==
2024-04-26 04:12:03 UTC	5842	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 22 63 6e 78 5f 72 6f 69 22 2c 6a 3d 22 63 6e 78 63 6c 69 64 22 2c 73 3d 22 63 6e 78 76 32 22 2c 69 3d 22 7e 22 2c 6b 3d 33 2c 44 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 7a 72 61 74 65 2e 63 6f 6d 2f 72 6f 69 2f 69 6e 64 65 78 2e 78 70 6d 6c 22 2c 61 3d 33 31 30 37 34 38 2c 41 3d 22 31 35 34 33 33 39 32 22 3b 66 75 6e 63 74 69 6f 6e 20 67 28 4a 2c 46 2c 49 2c 47 29 7b 76 61 72 20 48 3d 6e 65 77 20 44 61 74 65 28 29 3b 48 2e 73 65 74 54 69 6d 65 28 48 2e 67 65 74 54 69 6d 65 28 29 2b 47 2a 32 34 2a 36 30 2a 36 30 2a 31 30 30 30 29 3b 4a 2e 63 6f 6f 6b 69 65 3d 46 2b 22 3d 22 2b 49 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 48 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3b 64 6f 6d 61 69 6e 3d 22 Data Ascii: (function(){var d="cnx_roi",j="cnxclid",s="cnxv2",i="~",k=3,D="https://www.bizrate.com/roi/index.xpml",a=310748,A="1543392";function g(J,F,I,G){var H=new Date();H.setTime(H.getTime()+G2460601000);J.cookie=F+"="+I+";expires="+H.toUTCString()+";domain="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50069	173.194.213.155	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	656	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&uid=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&gjid=998327875&_gid=775248889.1714104719&_u=YEBAAEAAAAAAACAAI~&z=1941767255 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 26 Apr 2024 04:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:03 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50071	104.16.118.43	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	1157	OUT	GET /pixel/uVe7f6hL1p6P5l8A7l89?page_url=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	1032	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Type: text/javascript Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=eE.sPJ7o9leGSESPAACGr.hdUHVi85JDOy5qJQIa7l8-1714104723-1.0.1.1-IG12GCts.uJ4LGi5QMDMLDx37uXVtqREJhuJEA0elewOm4DqpHHOCu46wuNalocPl5estb7Jr9vCgmPsc2decw; path=/; expires=Fri, 26-Apr-24 04:42:03 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=VY2s2j_PA8XJtIYyUGBnEIiAwB4c97XcfCf4htKq81M-1714104723376-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a3bb78b94bdb21-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50072	54.148.46.119	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	613	OUT	POST /v2/c HTTP/1.1 Host: api.neuro-id.com Connection: keep-alive Content-Length: 600 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	600	OUT	Data Raw: 6b 65 79 3d 6b 65 79 5f 6c 69 76 65 5f 4a 78 72 46 4b 43 71 7a 59 64 64 47 75 36 69 4f 65 6f 72 39 73 45 49 36 26 69 64 3d 64 32 37 66 36 36 63 32 63 63 30 61 26 73 65 73 73 69 6f 6e 49 64 3d 62 30 32 31 62 30 32 65 2d 65 66 61 34 2d 34 37 64 39 2d 39 33 38 63 2d 32 30 37 61 61 37 32 33 66 33 64 37 26 63 6c 69 65 6e 74 49 64 3d 36 34 32 37 31 35 30 37 2d 64 66 65 31 2d 34 30 65 36 2d 38 35 30 36 2d 35 66 32 36 34 31 62 66 39 30 32 31 26 75 73 65 72 49 64 3d 6e 75 6c 6c 26 70 61 67 65 49 64 3d 64 32 37 66 36 36 35 65 36 38 30 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 73 69 67 6e 75 70 26 6a 73 56 65 72 73 69 6f 6e 3d 33 2e 32 2e 30 26 65 76 65 6e 74 73 3d 57 31 73 79 4d 44 41 73 49 69 4e 6e 4c Data Ascii: key=key_live_JxrFKCqzYddGu6iOeor9sEI6&id=d27f66c2cc0a&sessionId=b021b02e-efa4-47d9-938c-207aa723f3d7&clientId=64271507-dfe1-40e6-8506-5f2641bf9021&userId=null&pageId=d27f665e6801&url=https%3A%2F%2Fsquareup.com%2Fsignup&jsVersion=3.2.0&events=W1syMDAsIiNnL
2024-04-26 04:12:03 UTC	248	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 04:12:03 GMT Connection: close X-Request-Id: req_1s0CwNcUr5TzftAw Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://squareup.com Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50074	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	2066	OUT	GET /td/fls/rul/activityi;fledge=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:03 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50075	192.178.50.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	2053	OUT	GET /activityi;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: 12345.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	1563	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://12345.fls.doubleclick.net/activityi;dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50073	146.75.124.157	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	946	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:03 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-mia-kmia1760089-MIA X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-26 04:12:03 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50077	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	1469	OUT	GET /activityi;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:03 UTC	1443	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9628652.fls.doubleclick.net/activityi;dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50076	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	1503	OUT	GET /activityi;dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:03 GMT Expires: Fri, 26 Apr 2024 04:12:03 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	443	IN	Data Raw: 39 61 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 79 44 5f 74 69 42 33 34 55 44 46 65 Data Ascii: 9a2<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLyD_tiB34UDFe
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 6f 75 6e 74 72 79 5f 63 6f 64 65 25 33 44 75 73 25 32 36 72 65 74 75 72 6e 5f 74 6f 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 35 32 46 61 70 70 25 32 35 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 35 32 46 6c 6f 67 69 6e 25 32 35 32 46 73 71 75 61 72 65 25 32 35 33 46 73 73 6f 5f 69 6e 74 65 6e 74 25 32 35 33 44 73 69 67 6e 75 70 25 32 36 76 25 33 44 77 65 65 62 6c 79 2d 73 73 6f 25 32 36 77 65 65 62 6c 79 5f 73 73 6f 5f 65 6e 61 62 6c 65 64 25 33 44 74 72 75 65 3b 75 31 32 3d 75 73 3b 75 31 34 3d 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 61 6d 70 3b 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 61 6d 70 3b Data Ascii: ountry_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&
2024-04-26 04:12:04 UTC	775	IN	Data Raw: 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 79 4d 51 70 6a 62 32 35 32 5a 58 4a 7a 61 57 39 75 58 32 31 6c 59 58 4e 31 63 6d 56 74 5a 57 35 30 58 32 52 70 62 57 56 75 63 32 6c 76 62 6e 4e 66 5a 47 46 30 59 53 42 37 43 69 41 67 62 57 56 68 63 33 56 79 5a 57 31 6c 62 6e 52 66 5a 47 6c 74 5a 57 35 7a 61 57 39 75 4f 69 42 44 54 30 35 57 52 56 4a 54 53 55 39 4f 58 30 52 4a 54 55 56 4f 55 30 6c 50 54 6c 39 47 54 45 39 50 52 45 78 4a 52 30 68 55 58 30 46 44 56 45 6c 57 53 56 52 5a 58 30 6c 45 43 69 41 67 62 57 56 68 63 33 56 79 5a 57 31 6c 62 6e 52 66 5a 47 6c 74 5a 57 35 7a 61 57 39 75 58 33 5a 68 62 48 56 6c 49 48 73 4b 49 43 41 67 49 47 6c 75 64 44 59 30 58 33 5a 68 62 48 56 6c 4f 69 41 78 4d 6a 67 32 4e 7a 41 32 4d 77 6f 67 49 48 30 4b 66 51 70 6a 62 32 35 32 Data Ascii: GV0eXBlX2lkOiAyMQpjb252ZXJzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBDT05WRVJTSU9OX0RJTUVOU0lPTl9GTE9PRExJR0hUX0FDVElWSVRZX0lECiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAxMjg2NzA2MwogIH0KfQpjb252
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50081	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:04 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50083	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	593	OUT	GET /scripttemplates/202301.2.0/assets/otCenterRounded.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: 3j6krUd8tta5DgtKf9NJpg== Last-Modified: Fri, 17 Feb 2023 03:39:04 GMT x-ms-request-id: b725fbbb-f01e-0066-5272-7976a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56933 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb7c9a9e74a6-MIA
2024-04-26 04:12:04 UTC	560	IN	Data Raw: 32 35 66 31 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 43 65 6e 74 65 72 52 6f 75 6e 64 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 51 32 56 75 64 47 56 79 55 6d 39 31 62 6d 52 6c 5a 43 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 75 5a 58 Data Ascii: 25f1 { "name": "otCenterRounded", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90Q2VudGVyUm91bmRlZCI+PGRpdiBjbGFzcz0ib3Qtc2RrLWNvbnRhaW5lciIgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtZGVzY3JpYmVkYnk9Im9uZX
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 30 61 58 52 73 5a 53 49 2b 56 47 6c 30 62 47 55 38 4c 32 67 79 50 6a 78 77 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 56 34 64 44 78 68 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6e 42 76 62 47 6c 6a 65 54 77 76 59 54 34 38 4c 33 41 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 50 43 39 77 50 6a Data Ascii: 0aXRsZSI+VGl0bGU8L2gyPjxwIGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGV4dDxhIGhyZWY9IiMiPnBvbGljeTwvYT48L3A+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+PC9wPj
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 43 65 6e 74 65 72 52 6f 75 6e 64 65 64 7b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 74 6f 70 3a 31 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 35 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 Data Ascii: dj48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otCenterRounded{z-index:2147483645;top:10%;position:fixed;right:0;background-color:#fff;width:60%;max-width:650px;border-radius:2.5
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 67 69 6e 3a 30 20 31 2e 38 37 35 72 65 6d 20 2e 36 32 35 72 65 6d 20 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 67 76 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f Data Ascii: gin:0 1.875rem .625rem 1.875rem}#onetrust-banner-sdk .ot-gv-list-handler{padding:0;border:0;height:auto;width:auto}#onetrust-banner-sdk .ot-b-addl-desc{display:block}#onetrust-banner-sdk #onetrust-button-group-parent{padding:15px 30px;text-align:center}#o
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 63 61 6c 63 28 34 30 25 20 2d 20 31 38 70 78 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 2e 62 61 6e 6e 65 72 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 36 30 25 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d Data Ascii: width:calc(40% - 18px)}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler.cookie-setting-link{text-align:left;margin-right:0}#onetrust-banner-sdk .has-reject-all-button .banner-actions-container{max-width:60%;width:auto}#onetrust-banner-
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 68 65 61 64 65 72 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 Data Ascii: banner-sdk .banner-option-header :first-child{color:dimgray;font-weight:bold;float:left}#onetrust-banner-sdk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-trans
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 20 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 6c 69 6e 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 6f 70 3a 31 Data Ascii: t-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em;line-height:1.5;float:none}#onetrust-banner-sdk #onetrust-policy-text a{font-weight:bold;margin-left:5px}#onetrust-banner-sdk.ot-close-btn-link #onetrust-close-btn-container{top:1
2024-04-26 04:12:04 UTC	947	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 31 30 70 78 20 32 32 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 32 32 70 78 20 31 30 70 78 20 32 32 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 34 70 78 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b Data Ascii: #onetrust-policy-title{padding:0 22px 10px 22px}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk :not(.ot-dpd-desc)>.ot-b-addl-desc,#onetrust-banner-sdk .ot-dpd-container{margin:0 22px 10px 22px;width:calc(100% - 44px)}#onetrust-banner-sdk
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50084	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	591	OUT	GET /scripttemplates/202301.2.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Z9ctTlIOTjmEMU/y5+FSYA== Last-Modified: Fri, 17 Feb 2023 03:39:06 GMT x-ms-request-id: 6a9ff641-301e-0069-3a66-0c00cf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 31042 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb7c9ebe571f-MIA
2024-04-26 04:12:04 UTC	560	IN	Data Raw: 37 63 37 39 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c79 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 62 47 46 69 5a 57 77 67 5a 6d 39 79 50 53 4a 32 5a 57 35 6b 62 33 49 74 63 32 56 68 63 6d 4e 6f 4c 57 68 68 62 6d 52 73 5a 58 49 69 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 59 33 4a 75 4c 58 4a 6b 63 69 49 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 47 6c 75 63 48 56 30 49 47 6c 6b 50 53 4a 32 5a 57 35 6b 62 33 49 74 63 32 56 68 63 6d 4e 6f 4c Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48bGFiZWwgZm9yPSJ2ZW5kb3Itc2VhcmNoLWhhbmRsZXIiIGNsYXNzPSJvdC1zY3JuLXJkciI+PC9sYWJlbD4gPGlucHV0IGlkPSJ2ZW5kb3Itc2VhcmNoL
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 49 48 67 39 49 6a 42 77 65 43 49 67 65 54 30 69 4d 48 42 34 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4e 44 41 79 4c 6a 55 33 4e 79 41 30 4d 44 49 75 4e 54 63 33 49 69 42 34 62 57 77 36 63 33 42 68 59 32 55 39 49 6e 42 79 5a 58 4e 6c 63 6e 5a 6c 49 6a 34 38 64 47 6c 30 62 47 55 2b 52 6d 6c 73 64 47 56 79 49 45 6c 6a 62 32 34 38 4c 33 52 70 64 47 78 6c 50 6a 78 6e 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4e 6d 5a 6d 59 69 49 47 51 39 49 6b 30 30 4d 44 41 75 4f 44 55 34 4c 44 45 78 4c 6a 51 79 4e 32 4d 74 4d 79 34 79 4e 44 45 74 4e 79 34 30 4d 6a 45 74 4f 43 Data Ascii: geG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiIHg9IjBweCIgeT0iMHB4IiB2aWV3Qm94PSIwIDAgNDAyLjU3NyA0MDIuNTc3IiB4bWw6c3BhY2U9InByZXNlcnZlIj48dGl0bGU+RmlsdGVyIEljb248L3RpdGxlPjxnPjxwYXRoIGZpbGw9IiNmZmYiIGQ9Ik00MDAuODU4LDExLjQyN2MtMy4yNDEtNy40MjEtOC
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 62 6e 51 67 62 33 51 74 63 47 4d 74 63 32 4e 79 62 32 78 73 59 6d 46 79 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 6d 78 72 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 68 6b 63 69 49 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 76 62 6e 4e 6c 62 6e 51 74 61 47 52 79 49 6a 35 44 62 32 35 7a 5a 57 35 30 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6b 74 61 47 52 79 49 6a 35 4d 5a 57 63 75 53 57 35 30 5a 58 4a 6c 63 33 51 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 Data Ascii: bnQgb3QtcGMtc2Nyb2xsYmFyIj48ZGl2IGlkPSJvdC1zZWwtYmxrIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWhkciI+PHNwYW4gY2xhc3M9Im90LWNvbnNlbnQtaGRyIj5Db25zZW50PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGktaGRyIj5MZWcuSW50ZXJlc3Q8L3NwYW4+PC9kaXY+PGRpdiB
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 57 4e 35 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 68 6b 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 59 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 78 70 62 6d 73 69 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6c 5a 70 5a 58 63 67 55 48 4a 70 64 6d 46 6a 65 53 42 4f 62 33 52 70 59 32 55 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 30 62 32 64 6e 62 47 56 7a 49 47 46 75 5a 43 42 68 63 6e 4a 76 64 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 30 5a 32 77 74 59 32 35 30 63 69 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 7a 5a 57 4e 30 61 57 39 75 Data Ascii: WN5IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtdmVuLWhkciI+PGgzIGNsYXNzPSJvdC12ZW4tbmFtZSI+PC9oMz48YSBjbGFzcz0ib3QtdmVuLWxpbmsiIGhyZWY9IiMiPlZpZXcgUHJpdmFjeSBOb3RpY2U8L2E+PC9kaXY+PCEtLSB0b2dnbGVzIGFuZCBhcnJvdyAtLT48ZGl2IGNsYXNzPSJvdC10Z2wtY250ciI+PC9kaXY+PC9zZWN0aW9u
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 4e 30 4c 57 4e 75 64 48 49 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 70 62 6d 73 74 59 6e 52 75 49 47 4e 68 64 47 56 6e 62 33 4a 35 4c 58 5a 6c 62 6d 52 76 63 6e 4d 74 62 47 6c 7a 64 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 57 61 57 56 33 49 46 5a 6c 62 6d 52 76 63 69 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 32 39 72 61 57 55 67 62 47 39 7a 64 43 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 61 47 39 7a 64 43 31 73 61 Data Ascii: N0LWNudHIiPjxidXR0b24gY2xhc3M9Im90LWxpbmstYnRuIGNhdGVnb3J5LXZlbmRvcnMtbGlzdC1oYW5kbGVyIj5WaWV3IFZlbmRvciBMaXN0PC9idXR0b24+PC9kaXY+PCEtLSBDb29raWUgbG9zdCBsaW5rIC0tPjxkaXYgY2xhc3M9Im90LWhsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktaG9zdC1sa
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 39 49 6d 4e 68 63 6d 56 30 4c 58 4a 70 5a 32 68 30 49 69 42 79 62 32 78 6c 50 53 4a 70 62 57 63 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 45 35 4d 69 41 31 4d 54 49 69 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 6d 4e 31 63 6e 4a 6c 62 6e 52 44 62 32 78 76 63 69 49 67 5a 44 30 69 54 54 45 32 4e 69 34 35 49 44 49 32 4e 43 34 31 62 43 30 78 4d 54 63 75 4f 43 41 78 4d 54 5a 6a 4c 54 51 75 4e 79 41 30 4c 6a 63 74 4d 54 49 75 4d 79 41 30 4c 6a 63 74 4d 54 63 67 4d 47 77 74 4e 79 34 78 4c 54 63 75 4d 57 4d 74 4e 43 34 33 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4d 54 49 75 4d 79 41 77 4c 54 45 33 54 44 Data Ascii: 9ImNhcmV0LXJpZ2h0IiByb2xlPSJpbWciIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgdmlld0JveD0iMCAwIDE5MiA1MTIiPjxwYXRoIGZpbGw9ImN1cnJlbnRDb2xvciIgZD0iTTE2Ni45IDI2NC41bC0xMTcuOCAxMTZjLTQuNyA0LjctMTIuMyA0LjctMTcgMGwtNy4xLTcuMWMtNC43LTQuNy00LjctMTIuMyAwLTE3TD
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 53 57 35 6d 62 33 4a 74 59 58 52 70 62 32 34 67 63 33 52 76 63 6d 46 6e 5a 53 42 68 62 6d 51 67 59 57 4e 6a 5a 58 4e 7a 49 48 52 6c 63 33 51 38 4c 32 67 30 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 59 57 4e 6a 62 33 4a 6b 61 57 39 75 49 47 52 6c 64 47 46 70 62 43 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 68 59 32 4d 74 5a 33 4a 77 59 32 35 30 63 69 42 76 64 43 31 68 59 32 4d 74 64 48 68 30 49 47 39 30 4c 58 5a 75 5a 43 31 70 62 6d 5a 76 4c 57 4e 75 64 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 70 62 6d 5a 76 49 6a 34 38 61 44 55 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 73 59 6d 77 69 50 6c 4e 6c 63 6e 5a 70 59 32 55 67 54 6d 46 74 5a 54 77 76 61 44 55 Data Ascii: SW5mb3JtYXRpb24gc3RvcmFnZSBhbmQgYWNjZXNzIHRlc3Q8L2g0PjwvZGl2PjwhLS0gYWNjb3JkaW9uIGRldGFpbCAtLT48ZGl2IGNsYXNzPSJvdC1hY2MtZ3JwY250ciBvdC1hY2MtdHh0IG90LXZuZC1pbmZvLWNudHIiPjxkaXYgY2xhc3M9Im90LXZuZC1pbmZvIj48aDUgY2xhc3M9Im90LXZuZC1sYmwiPlNlcnZpY2UgTmFtZTwvaDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50086	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	433	OUT	GET /consent/c4657020-c7d1-4a14-a091-267a7ee4863e/438838e0-2800-4410-b44b-37a1d246db65/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87a3bb7cab025c86-MIA CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 76167 Cache-Control: public, max-age=86400 Expires: Sat, 27 Apr 2024 04:12:03 GMT Last-Modified: Tue, 19 Dec 2023 22:17:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: SfmR1IKy+4DfuSJpGldjBg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2d73a7d2-201e-0065-7f2b-6197c7000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-26 04:12:04 UTC	467	IN	Data Raw: 37 63 31 62 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 70 72 65 66 Data Ascii: 7c1b{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"Cookie pref
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 6f 75 72 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 2e 20 59 6f 75 20 6d 61 79 20 6f 70 74 20 6f 75 74 20 6f 66 20 63 65 72 74 61 69 6e 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 74 68 69 72 64 20 70 61 72 74 79 20 63 6f 6f 6b 69 65 73 2c 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 6f 73 65 20 74 68 61 74 20 61 72 65 20 73 74 72 69 63 74 6c 79 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 6f 75 72 20 53 65 72 76 69 63 65 Data Ascii: technologies described in our Cookie Policy. This information might be about you, your preferences, or your device. You may opt out of certain categories of third party cookies, other than those that are strictly necessary to provide you with our Service
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 4d 61 6e 61 67 65 20 63 6f 6f 6b 69 65 73 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 Data Ascii: es":false,"LastReconsentDate":null,"BannerTitle":"Manage cookies","ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","Ve
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 75 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 77 69 74 68 20 74 68 65 20 53 65 72 76 69 63 65 73 2e 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 75 73 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f Data Ascii: t":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These technologies are necessary for us to provide you with the Services.","GroupDescriptionOTT":"These technologies are necessary for us to provide yo
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 66 64 37 35 62 33 61 2d 32 36 34 38 2d 34 63 37 31 2d 62 33 35 35 2d 62 Data Ascii: e the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"1fd75b3a-2648-4c71-b355-b
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 65 76 65 6c 6f 70 65 72 2e 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 64 64 5f 63 6f 6f 6b 69 65 5f 74 65 73 74 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 61 65 38 64 36 36 34 2d 61 34 38 33 2d 34 35 39 33 2d 61 66 65 34 2d 38 35 66 66 35 39 66 65 63 38 63 38 22 2c 22 4e 61 6d 65 22 3a 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 22 48 6f 73 74 22 3a 22 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 Data Ascii: eveloper.squareup.com","IsSession":false,"Length":"0","description":"dd_cookie_test","DurationType":1,"category":null,"isThirdParty":false},{"id":"eae8d664-a483-4593-afe4-85ff59fec8c8","Name":"OptanonConsent","Host":"squareup.com","IsSession":false,"Lengt
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 69 74 68 20 73 69 74 65 20 73 65 63 75 72 69 74 79 20 69 6e 20 70 72 65 76 65 6e 74 69 6e 67 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 20 61 74 74 61 63 6b 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 77 65 65 62 6c 79 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 77 65 65 62 6c 79 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 35 32 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 62 63 31 61 63 64 31 35 Data Ascii: ith site security in preventing Cross-Site Request Forgery attacks.","DurationType":1,"category":null,"isThirdParty":false}]},{"HostName":"weebly.com","DisplayName":"weebly.com","HostId":"H52","Description":"","PrivacyPolicy":"","Cookies":[{"id":"bc1acd15
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 73 69 74 65 73 20 75 73 69 6e 67 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 74 6f 20 6c 6f 61 64 20 6f 74 68 65 72 20 73 63 72 69 70 74 73 20 61 6e 64 20 63 6f 64 65 20 69 6e 74 6f 20 61 20 70 61 67 65 2e 20 20 57 68 65 72 65 20 69 74 20 69 73 20 75 73 65 64 20 69 74 20 6d 61 79 20 62 65 20 72 65 67 61 72 64 65 64 20 61 73 20 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 61 73 20 77 69 74 68 6f 75 74 20 69 74 2c 20 6f 74 68 65 72 20 73 63 72 69 70 74 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e Data Ascii: om","IsSession":false,"Length":"0","description":"This cookie is associated with sites using Google Tag Manager to load other scripts and code into a page. Where it is used it may be regarded as Strictly Necessary as without it, other scripts may not fun
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 64 20 66 72 6f 6d 20 77 68 65 72 65 20 79 6f 75 20 68 61 76 65 20 61 63 63 65 73 73 65 64 20 74 68 65 20 53 65 72 76 69 63 65 73 2c 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 69 6d 70 72 6f 76 65 20 74 68 65 20 53 65 72 76 69 63 65 73 20 61 6e 64 20 6c 65 61 72 6e 20 61 62 6f 75 74 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 61 73 70 65 63 74 73 20 6f 66 20 74 68 65 20 53 65 72 76 69 63 65 73 2e 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 6f 75 72 20 53 65 72 76 69 63 65 73 20 63 61 6e 20 63 6f 70 65 20 77 69 74 68 20 74 68 65 20 76 6f 6c 75 6d 65 20 6f 66 20 75 73 65 72 73 2c 20 74 6f 20 68 65 6c Data Ascii: d from where you have accessed the Services, so that we can improve the Services and learn about the most popular aspects of the Services.","GroupDescriptionOTT":"This information is used to make sure our Services can cope with the volume of users, to hel
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 5f 78 78 78 78 22 2c 22 48 6f 73 74 22 3a 22 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 6f 77 6e 65 64 20 62 79 20 41 64 6f 62 65 2f 4f 6d 6e 69 74 75 72 65 2e 20 54 68 65 20 6d 61 69 6e 20 62 75 73 69 6e 65 73 73 20 61 63 74 69 76 69 74 79 20 69 73 3a 20 41 6e 61 6c 79 74 69 63 73 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 64 65 35 30 62 32 31 62 2d 64 33 63 31 2d 34 61 39 36 2d 61 35 61 30 2d 61 64 35 33 39 31 30 39 39 62 38 35 Data Ascii: _xxxx","Host":"squareup.com","IsSession":false,"Length":"0","description":"This domain is owned by Adobe/Omniture. The main business activity is: Analytics","DurationType":1,"category":null,"isThirdParty":false},{"id":"de50b21b-d3c1-4a96-a5a0-ad5391099b85

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50085	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	591	OUT	GET /scripttemplates/202301.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	826	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:03 GMT Content-Type: text/css Content-Length: 21721 Connection: close Content-MD5: XcxlleAcPGO2n5kTZrHH2Q== Last-Modified: Fri, 17 Feb 2023 03:39:15 GMT ETag: 0x8DB10988AD7B0EC x-ms-request-id: cd67f3e9-901e-0094-0e03-248eea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 26803 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb7ca884a4f1-MIA
2024-04-26 04:12:04 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e Data Ascii: nt-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:hover,#ot-sync-ntfy button.ot-link-btn
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 63 72 6e 2d 72 64 72 2c 2e 6f 74 2d 73 64 6b 2d 63 6f Data Ascii: ound-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .ot-scrn-rdr,.ot-sdk-co
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6f 75 74 6c 69 6e 65 2d 73 Data Ascii: ookie-label{text-decoration:underline}@media only screen and (min-width: 426px) and (max-width: 896px) and (orientation: landscape){#onetrust-pc-sdk p{font-size:0.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #000;outline-s
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 3a 3a 61 66 74 65 Data Ascii: cale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-banner-sdk,#onetrust-pc-sdk,#ot-sdk-cookie-policy,#ot-sync-ntfy{font-size:16px}#onetrust-banner-sdk *,#onetrust-banner-sdk ::afte
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 35 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 36 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 Data Ascii: pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,#onetrust-pc-sdk h5,#onetrust-pc-sdk h6,#onetrust-pc-sdk p,#onetrust-pc-sdk img,#onetrust-pc-sdk svg,#onetrust-pc-sdk button,#onetrust-pc-sdk
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 70 61 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 31 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 32 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 33 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 35 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 70 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 69 6d 67 2c Data Ascii: #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy span,#ot-sync-ntfy h1,#ot-sync-ntfy h2,#ot-sync-ntfy h3,#ot-sync-ntfy h4,#ot-sync-ntfy h5,#ot-sync-ntfy h6,#ot-sync-ntfy p,#ot-sync-ntfy img,
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 74 2d Data Ascii: abel:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,#ot-sdk-cookie-policy label:after,#ot-sdk-cookie-policy .checkbox:after,#ot-sdk-cookie-policy .checkbox:before,#ot-sync-ntfy label:before,#ot-
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d Data Ascii: dk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first-child,#onetrust-pc-sdk .ot-sdk-column:first-child,#onetrust-pc-sdk .ot-sdk-columns:first-child,#ot-sdk-cookie-policy .ot-sdk-column:first-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50080	52.46.155.104	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	1014	OUT	GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Length: 0 Connection: close x-amz-rid: EDYJF00HMSN5JRZDR508 Set-Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 04:12:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50087	52.223.40.198	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	1176	OUT	GET /track/up?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	377	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Length: 259 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0 set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:04 UTC	259	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 61 74 70 68 6a 72 73 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 26 75 70 69 64 3d 72 79 75 70 6b 36 77 26 75 70 76 3d 31 2e 31 2e 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 61 74 70 68 6a 72 73 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 26 75 70 69 64 3d 72 79 75 70 6b 36 77 26 75 70 76 3d 31 2e 31 2e 30 3c 2f 61 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0">https://match.adsrvr.org/track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0</a></body></h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50088	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:03 UTC	988	OUT	OPTIONS /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://tealium-f.squarecdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: * Access-Control-Max-Age: 3600 Content-Type: text/html; charset=utf-8 Function-Execution-Id: gzxoj4grg3wh X-Cloud-Trace-Context: 2ac53fb3ce58ab1bf7159f9056d4db46 Date: Fri, 26 Apr 2024 04:12:04 GMT Server: Google Frontend Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50090	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1491	OUT	GET /td/rul/984344943?random=1714104722646&cv=11&fst=1714104722646&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	470	IN	Data Raw: 34 33 66 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 43f7<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 6d 65 22 3a 22 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 36 38 33 32 37 39 39 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 33 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c Data Ascii: ame":"1j468327996","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j468327996\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignal
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 4a 4d 61 55 4f 36 49 4d 76 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 34 36 38 35 37 35 38 33 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 30 36 35 35 31 39 32 38 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 Data Ascii: "adRenderId":"WJMaUO6IMvM"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160468575836\u0026cr_id=695106551928\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["16
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 35 35 30 32 33 35 36 37 36 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 30 38 30 34 35 38 38 39 35 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 35 30 32 33 35 36 37 36 39 22 2c 22 36 39 30 38 30 34 35 38 38 39 35 37 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 36 30 31 32 36 30 31 22 5d 2c Data Ascii: ://tdsf.doubleclick.net/td/adfetch/gda?adg_id=145502356769\u0026cr_id=690804588957\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["145502356769","690804588957",null,"18666012601"],
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 32 37 34 30 31 31 36 32 32 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 33 34 37 37 34 37 36 34 37 35 22 2c 22 36 39 32 37 34 30 31 31 36 32 32 36 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 68 62 44 7a 42 77 68 46 64 49 34 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: 43477476475\u0026cr_id=692740116226\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["143477476475","692740116226",null,"18662339193"],"adRenderId":"hbDzBwhFdI4"},{"renderUrl":"https
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 39 37 35 35 32 31 35 35 30 22 2c 22 36 39 35 31 38 30 32 38 37 31 34 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 79 67 69 42 4b 73 77 35 75 45 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: 0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["163975521550","695180287142",null,"18662339193"],"adRenderId":"8ygiBKsw5uE"}],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https:/
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 36 31 37 33 31 39 38 33 35 36 34 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 38 30 32 36 39 34 31 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 37 33 31 39 38 33 35 36 34 22 2c 22 36 39 35 31 38 30 32 36 39 34 31 35 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 55 65 30 52 2d 59 55 71 76 59 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: 61731983564\u0026cr_id=695180269415\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["161731983564","695180269415",null,"18662291418"],"adRenderId":"8Ue0R-YUqvY"},{"renderUrl":"https
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 36 38 34 31 30 31 33 35 34 22 2c 22 36 39 30 38 37 33 35 33 37 30 35 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 54 74 73 4d 55 73 78 6e 70 61 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 Data Ascii: 0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["145684101354","690873537053",null,"18662291418"],"adRenderId":"TtsMUsxnpa8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=1
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 32 32 36 32 34 36 38 33 30 36 22 2c 22 36 39 30 38 34 31 37 36 34 37 31 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 51 73 48 7a 68 4a 46 31 46 79 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 32 39 37 36 35 35 39 31 31 37 33 5c 75 30 30 32 36 63 76 5f 69 64 3d Data Ascii: =${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["142262468306","690841764712",null,"18662323416"],"adRenderId":"QsHzhJF1Fy8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=143477476475\u0026cr_id=629765591173\u0026cv_id=
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 34 36 38 35 37 35 39 39 36 22 2c 22 36 39 35 35 30 30 39 39 38 39 32 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 47 6e 33 56 49 58 57 53 44 30 63 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 39 37 35 35 32 31 35 35 30 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 34 33 33 37 34 32 32 37 30 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 Data Ascii: 569","metadata":["160468575996","695500998923",null,"18662323416"],"adRenderId":"Gn3VIXWSD0c"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163975521550\u0026cr_id=694337422706\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50089	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1517	OUT	GET /td/rul/984344943?random=1714104722660&cv=11&fst=1714104722660&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	470	IN	Data Raw: 35 39 39 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 5998<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 6d 65 22 3a 22 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 38 33 31 35 36 39 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 33 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 Data Ascii: me":"1j481831569","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481831569\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignals
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 30 31 32 36 30 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 4a 4d 61 55 4f 36 49 4d 76 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 34 36 38 35 37 35 38 33 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 30 36 35 35 31 39 32 38 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 Data Ascii: 012601"],"adRenderId":"WJMaUO6IMvM"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160468575836\u0026cr_id=695106551928\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metad
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 35 35 30 32 33 35 36 37 36 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 30 38 30 34 35 38 38 39 35 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 35 30 32 33 35 36 37 36 39 22 2c 22 36 39 30 38 30 34 35 38 38 39 35 37 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 36 Data Ascii: l":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=145502356769\u0026cr_id=690804588957\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["145502356769","690804588957",null,"18666
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 32 37 34 30 31 31 36 32 32 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 33 34 37 37 34 37 36 34 37 35 22 2c 22 36 39 32 37 34 30 31 31 36 32 32 36 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 68 62 44 7a 42 77 68 46 64 49 34 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 Data Ascii: ?adg_id=143477476475\u0026cr_id=692740116226\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["143477476475","692740116226",null,"18662339193"],"adRenderId":"hbDzBwhFdI4"},{"renderUr
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 39 37 35 35 32 31 35 35 30 22 2c 22 36 39 35 31 38 30 32 38 37 31 34 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 79 67 69 42 4b 73 77 35 75 45 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 Data Ascii: 026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["163975521550","695180287142",null,"18662339193"],"adRenderId":"8ygiBKsw5uE"}],"executionMode":"group-by-origin","biddingWasmHelperUrl"
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 37 33 31 39 38 33 35 36 34 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 38 30 32 36 39 34 31 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 37 33 31 39 38 33 35 36 34 22 2c 22 36 39 35 31 38 30 32 36 39 34 31 35 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 55 65 30 52 2d 59 55 71 76 59 22 7d Data Ascii: adfetch/gda?adg_id=161731983564\u0026cr_id=695180269415\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["161731983564","695180269415",null,"18662291418"],"adRenderId":"8Ue0R-YUqvY"}
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 37 33 35 33 37 30 35 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 36 38 34 31 30 31 33 35 34 22 2c 22 36 39 30 38 37 33 35 33 37 30 35 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 54 74 73 4d 55 73 78 6e 70 61 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f Data Ascii: 73537053\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["145684101354","690873537053",null,"18662291418"],"adRenderId":"TtsMUsxnpa8"},{"renderUrl":"https://tdsf.doubleclick.net/td/
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 32 32 36 32 34 36 38 33 30 36 22 2c 22 36 39 30 38 34 31 37 36 34 37 31 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 51 73 48 7a 68 4a 46 31 46 79 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 32 39 37 Data Ascii: {AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["142262468306","690841764712",null,"18662323416"],"adRenderId":"QsHzhJF1Fy8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=143477476475\u0026cr_id=6297
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 34 36 38 35 37 35 39 39 36 22 2c 22 36 39 35 35 30 30 39 39 38 39 32 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 47 6e 33 56 49 58 57 53 44 30 63 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 39 37 35 35 32 31 35 35 30 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 34 33 33 37 34 32 32 37 30 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 Data Ascii: \u0026rp_id=1j468327996","metadata":["160468575996","695500998923",null,"18662323416"],"adRenderId":"Gn3VIXWSD0c"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163975521550\u0026cr_id=694337422706\u0026cv_id=0\u0026format=${AD_WIDTH}x$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50092	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1491	OUT	GET /td/rul/984344943?random=1714104722664&cv=11&fst=1714104722664&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	470	IN	Data Raw: 34 33 66 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 43f7<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 6d 65 22 3a 22 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 38 33 31 35 36 39 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 33 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 Data Ascii: me":"1j481831569","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481831569\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignals
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 4a 4d 61 55 4f 36 49 4d 76 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 34 36 38 35 37 35 38 33 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 30 36 35 35 31 39 32 38 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 Data Ascii: adRenderId":"WJMaUO6IMvM"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160468575836\u0026cr_id=695106551928\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["160
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 35 35 30 32 33 35 36 37 36 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 30 38 30 34 35 38 38 39 35 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 35 30 32 33 35 36 37 36 39 22 2c 22 36 39 30 38 30 34 35 38 38 39 35 37 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 36 30 31 32 36 30 31 22 5d 2c 22 Data Ascii: //tdsf.doubleclick.net/td/adfetch/gda?adg_id=145502356769\u0026cr_id=690804588957\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["145502356769","690804588957",null,"18666012601"],"
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 32 37 34 30 31 31 36 32 32 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 33 34 37 37 34 37 36 34 37 35 22 2c 22 36 39 32 37 34 30 31 31 36 32 32 36 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 68 62 44 7a 42 77 68 46 64 49 34 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: 3477476475\u0026cr_id=692740116226\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["143477476475","692740116226",null,"18662339193"],"adRenderId":"hbDzBwhFdI4"},{"renderUrl":"https:
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 38 33 31 35 36 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 39 37 35 35 32 31 35 35 30 22 2c 22 36 39 35 31 38 30 32 38 37 31 34 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 79 67 69 42 4b 73 77 35 75 45 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f Data Ascii: \u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481831569","metadata":["163975521550","695180287142",null,"18662339193"],"adRenderId":"8ygiBKsw5uE"}],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 31 37 33 31 39 38 33 35 36 34 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 38 30 32 36 39 34 31 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 37 33 31 39 38 33 35 36 34 22 2c 22 36 39 35 31 38 30 32 36 39 34 31 35 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 55 65 30 52 2d 59 55 71 76 59 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: 1731983564\u0026cr_id=695180269415\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["161731983564","695180269415",null,"18662291418"],"adRenderId":"8Ue0R-YUqvY"},{"renderUrl":"https:
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 36 38 34 31 30 31 33 35 34 22 2c 22 36 39 30 38 37 33 35 33 37 30 35 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 54 74 73 4d 55 73 78 6e 70 61 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 Data Ascii: \u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["145684101354","690873537053",null,"18662291418"],"adRenderId":"TtsMUsxnpa8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=14
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 32 32 36 32 34 36 38 33 30 36 22 2c 22 36 39 30 38 34 31 37 36 34 37 31 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 51 73 48 7a 68 4a 46 31 46 79 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 32 39 37 36 35 35 39 31 31 37 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 Data Ascii: ${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["142262468306","690841764712",null,"18662323416"],"adRenderId":"QsHzhJF1Fy8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=143477476475\u0026cr_id=629765591173\u0026cv_id=0
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 34 36 38 35 37 35 39 39 36 22 2c 22 36 39 35 35 30 30 39 39 38 39 32 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 47 6e 33 56 49 58 57 53 44 30 63 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 39 37 35 35 32 31 35 35 30 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 34 33 33 37 34 32 32 37 30 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d Data Ascii: 19","metadata":["160468575996","695500998923",null,"18662323416"],"adRenderId":"Gn3VIXWSD0c"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163975521550\u0026cr_id=694337422706\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50091	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1517	OUT	GET /td/rul/984344943?random=1714104722667&cv=11&fst=1714104722667&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 04:27:04 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	470	IN	Data Raw: 35 39 39 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 5998<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 6d 65 22 3a 22 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 36 38 33 32 37 39 39 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 33 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c Data Ascii: ame":"1j468327996","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j468327996\u0026tag_eid=44805653","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignal
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 36 30 31 32 36 30 31 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 4a 4d 61 55 4f 36 49 4d 76 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 34 36 38 35 37 35 38 33 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 30 36 35 35 31 39 32 38 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 Data Ascii: 6012601"],"adRenderId":"WJMaUO6IMvM"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160468575836\u0026cr_id=695106551928\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","meta
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 35 35 30 32 33 35 36 37 36 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 30 38 30 34 35 38 38 39 35 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 35 30 32 33 35 36 37 36 39 22 2c 22 36 39 30 38 30 34 35 38 38 39 35 37 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 Data Ascii: rl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=145502356769\u0026cr_id=690804588957\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["145502356769","690804588957",null,"1866
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 32 37 34 30 31 31 36 32 32 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 33 34 37 37 34 37 36 34 37 35 22 2c 22 36 39 32 37 34 30 31 31 36 32 32 36 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 68 62 44 7a 42 77 68 46 64 49 34 22 7d 2c 7b 22 72 65 6e 64 65 72 55 Data Ascii: a?adg_id=143477476475\u0026cr_id=692740116226\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["143477476475","692740116226",null,"18662339193"],"adRenderId":"hbDzBwhFdI4"},{"renderU
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 36 38 33 32 37 39 39 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 39 37 35 35 32 31 35 35 30 22 2c 22 36 39 35 31 38 30 32 38 37 31 34 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 33 39 31 39 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 79 67 69 42 4b 73 77 35 75 45 22 7d 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c Data Ascii: 0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j468327996","metadata":["163975521550","695180287142",null,"18662339193"],"adRenderId":"8ygiBKsw5uE"}],"executionMode":"group-by-origin","biddingWasmHelperUrl
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 31 37 33 31 39 38 33 35 36 34 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 35 31 38 30 32 36 39 34 31 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 31 37 33 31 39 38 33 35 36 34 22 2c 22 36 39 35 31 38 30 32 36 39 34 31 35 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 38 55 65 30 52 2d 59 55 71 76 59 22 7d Data Ascii: adfetch/gda?adg_id=161731983564\u0026cr_id=695180269415\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["161731983564","695180269415",null,"18662291418"],"adRenderId":"8Ue0R-YUqvY"}
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 37 33 35 33 37 30 35 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 35 36 38 34 31 30 31 33 35 34 22 2c 22 36 39 30 38 37 33 35 33 37 30 35 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 32 39 31 34 31 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 54 74 73 4d 55 73 78 6e 70 61 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f Data Ascii: 73537053\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["145684101354","690873537053",null,"18662291418"],"adRenderId":"TtsMUsxnpa8"},{"renderUrl":"https://tdsf.doubleclick.net/td/
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 32 32 36 32 34 36 38 33 30 36 22 2c 22 36 39 30 38 34 31 37 36 34 37 31 32 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 51 73 48 7a 68 4a 46 31 46 79 38 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 33 34 37 37 34 37 36 34 37 35 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 32 39 37 Data Ascii: {AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j455615919","metadata":["142262468306","690841764712",null,"18662323416"],"adRenderId":"QsHzhJF1Fy8"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=143477476475\u0026cr_id=6297
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 35 35 36 31 35 39 31 39 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 34 36 38 35 37 35 39 39 36 22 2c 22 36 39 35 35 30 30 39 39 38 39 32 33 22 2c 6e 75 6c 6c 2c 22 31 38 36 36 32 33 32 33 34 31 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 47 6e 33 56 49 58 57 53 44 30 63 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 39 37 35 35 32 31 35 35 30 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 39 34 33 33 37 34 32 32 37 30 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 Data Ascii: \u0026rp_id=1j455615919","metadata":["160468575996","695500998923",null,"18662323416"],"adRenderId":"Gn3VIXWSD0c"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163975521550\u0026cr_id=694337422706\u0026cv_id=0\u0026format=${AD_WIDTH}x$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50093	192.178.50.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	2127	OUT	GET /activityi;dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: 12345.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	942	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Expires: Fri, 26 Apr 2024 04:12:04 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmw5iCwvKidewfGEcgMsuxHAn9pmfpT5LgefgG8RDGoC7YEO192Sm3TruFamgQ; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	313	IN	Data Raw: 34 35 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 53 46 71 4e 6d 42 33 34 55 44 46 51 Data Ascii: 45f<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLSFqNmB34UDFQ
2024-04-26 04:12:04 UTC	813	IN	Data Raw: 33 35 33 34 39 36 30 37 3b 6e 70 61 3d 30 3b 70 73 3d 31 3b 70 63 6f 72 3d 37 30 34 30 30 36 35 39 37 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 6f 30 7a 38 38 31 31 37 36 30 37 33 33 7a 61 32 30 31 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b Data Ascii: 35349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50094	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1521	OUT	GET /td/rul/746791505?random=1714104722850&cv=11&fst=1714104722850&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnjcQygaUor8o5s_qAYCa_iF4gthJMD9tg2Ot0K8f54L44JDuYwkXXATCR_; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50095	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1521	OUT	GET /td/rul/746791505?random=1714104722873&cv=11&fst=1714104722873&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmRr4K5AFglO6K2V4AJ4WvXHKjIUP2FsdpBeFXLVacwUHdrLWFJziYczBG9; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50099	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	395	OUT	GET /scripttemplates/202301.2.0/assets/otCenterRounded.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: 3j6krUd8tta5DgtKf9NJpg== Last-Modified: Fri, 17 Feb 2023 03:39:04 GMT x-ms-request-id: bce004e2-f01e-0049-0a66-0c7b68000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 55718 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb810c437424-MIA
2024-04-26 04:12:04 UTC	560	IN	Data Raw: 32 35 66 31 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 43 65 6e 74 65 72 52 6f 75 6e 64 65 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 51 32 56 75 64 47 56 79 55 6d 39 31 62 6d 52 6c 5a 43 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 75 5a 58 Data Ascii: 25f1 { "name": "otCenterRounded", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90Q2VudGVyUm91bmRlZCI+PGRpdiBjbGFzcz0ib3Qtc2RrLWNvbnRhaW5lciIgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtZGVzY3JpYmVkYnk9Im9uZX
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 30 61 58 52 73 5a 53 49 2b 56 47 6c 30 62 47 55 38 4c 32 67 79 50 6a 78 77 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 56 34 64 44 78 68 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6e 42 76 62 47 6c 6a 65 54 77 76 59 54 34 38 4c 33 41 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 50 43 39 77 50 6a Data Ascii: 0aXRsZSI+VGl0bGU8L2gyPjxwIGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGV4dDxhIGhyZWY9IiMiPnBvbGljeTwvYT48L3A+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+PC9wPj
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 43 65 6e 74 65 72 52 6f 75 6e 64 65 64 7b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 74 6f 70 3a 31 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 35 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 Data Ascii: dj48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otCenterRounded{z-index:2147483645;top:10%;position:fixed;right:0;background-color:#fff;width:60%;max-width:650px;border-radius:2.5
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 67 69 6e 3a 30 20 31 2e 38 37 35 72 65 6d 20 2e 36 32 35 72 65 6d 20 31 2e 38 37 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 67 76 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f Data Ascii: gin:0 1.875rem .625rem 1.875rem}#onetrust-banner-sdk .ot-gv-list-handler{padding:0;border:0;height:auto;width:auto}#onetrust-banner-sdk .ot-b-addl-desc{display:block}#onetrust-banner-sdk #onetrust-button-group-parent{padding:15px 30px;text-align:center}#o
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 63 61 6c 63 28 34 30 25 20 2d 20 31 38 70 78 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2e 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 2d 6c 69 6e 6b 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 2e 62 61 6e 6e 65 72 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 36 30 25 3b 77 69 64 74 68 3a 61 75 74 6f 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d Data Ascii: width:calc(40% - 18px)}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler.cookie-setting-link{text-align:left;margin-right:0}#onetrust-banner-sdk .has-reject-all-button .banner-actions-container{max-width:60%;width:auto}#onetrust-banner-
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 68 65 61 64 65 72 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 Data Ascii: banner-sdk .banner-option-header :first-child{color:dimgray;font-weight:bold;float:left}#onetrust-banner-sdk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-trans
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 20 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 6c 69 6e 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 74 6f 70 3a 31 Data Ascii: t-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em;line-height:1.5;float:none}#onetrust-banner-sdk #onetrust-policy-text a{font-weight:bold;margin-left:5px}#onetrust-banner-sdk.ot-close-btn-link #onetrust-close-btn-container{top:1
2024-04-26 04:12:04 UTC	947	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 31 30 70 78 20 32 32 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 32 32 70 78 20 31 30 70 78 20 32 32 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 34 70 78 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b Data Ascii: #onetrust-policy-title{padding:0 22px 10px 22px}#onetrust-banner-sdk #onetrust-policy-text,#onetrust-banner-sdk :not(.ot-dpd-desc)>.ot-b-addl-desc,#onetrust-banner-sdk .ot-dpd-container{margin:0 22px 10px 22px;width:calc(100% - 44px)}#onetrust-banner-sdk
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50100	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	393	OUT	GET /scripttemplates/202301.2.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	826	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: text/css Content-Length: 21721 Connection: close Content-MD5: XcxlleAcPGO2n5kTZrHH2Q== Last-Modified: Fri, 17 Feb 2023 03:39:15 GMT ETag: 0x8DB10988AD7B0EC x-ms-request-id: af1ed93e-301e-0069-4b03-2400cf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 23846 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb810d2a746d-MIA
2024-04-26 04:12:04 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e Data Ascii: nt-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:hover,#ot-sync-ntfy button.ot-link-btn
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 63 72 6e 2d 72 64 72 2c 2e 6f 74 2d 73 64 6b 2d 63 6f Data Ascii: ound-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .ot-scrn-rdr,.ot-sdk-co
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6f 75 74 6c 69 6e 65 2d 73 Data Ascii: ookie-label{text-decoration:underline}@media only screen and (min-width: 426px) and (max-width: 896px) and (orientation: landscape){#onetrust-pc-sdk p{font-size:0.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #000;outline-s
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 3a 3a 61 66 74 65 Data Ascii: cale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-banner-sdk,#onetrust-pc-sdk,#ot-sdk-cookie-policy,#ot-sync-ntfy{font-size:16px}#onetrust-banner-sdk *,#onetrust-banner-sdk ::afte
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 35 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 36 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 Data Ascii: pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,#onetrust-pc-sdk h5,#onetrust-pc-sdk h6,#onetrust-pc-sdk p,#onetrust-pc-sdk img,#onetrust-pc-sdk svg,#onetrust-pc-sdk button,#onetrust-pc-sdk
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 73 70 61 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 31 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 32 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 33 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 35 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 70 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 69 6d 67 2c Data Ascii: #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy span,#ot-sync-ntfy h1,#ot-sync-ntfy h2,#ot-sync-ntfy h3,#ot-sync-ntfy h4,#ot-sync-ntfy h5,#ot-sync-ntfy h6,#ot-sync-ntfy p,#ot-sync-ntfy img,
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 74 2d Data Ascii: abel:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,#ot-sdk-cookie-policy label:after,#ot-sdk-cookie-policy .checkbox:after,#ot-sdk-cookie-policy .checkbox:before,#ot-sync-ntfy label:before,#ot-
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d Data Ascii: dk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first-child,#onetrust-pc-sdk .ot-sdk-column:first-child,#onetrust-pc-sdk .ot-sdk-columns:first-child,#ot-sdk-cookie-policy .ot-sdk-column:first-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50096	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1543	OUT	GET /activityi;dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Expires: Fri, 26 Apr 2024 04:12:04 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUk9D9i-2ERsBLIZ2ICeEuCebC-Jqu0SLdYXVu1kpPBmQlM7E4cjptph7Rc0POo; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	271	IN	Data Raw: 39 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 76 51 73 4e 6d 42 33 34 55 44 46 63 Data Ascii: 9a1<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNvQsNmB34UDFc
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3d 39 36 32 38 36 35 32 3b 74 79 70 65 3d 67 6c 6f 62 61 30 3b 63 61 74 3d 64 6f 75 62 6c 30 3b 6d 61 74 63 68 5f 69 64 3d 75 6e 64 65 66 69 6e 65 64 3b 75 31 3d 75 6e 64 65 66 69 6e 65 64 3b 75 32 3d 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 3b 75 33 3d 2f 73 69 67 6e 75 70 3b 75 34 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 73 69 67 6e 75 70 25 33 46 61 70 70 25 33 44 77 65 65 62 6c 79 25 32 36 63 6f 75 6e 74 72 79 5f 63 6f 64 65 25 33 44 75 73 25 32 36 72 65 74 75 72 6e 5f 74 6f 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 35 32 46 61 70 70 25 32 35 32 46 66 72 6f 6e 74 Data Ascii: =9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront
2024-04-26 04:12:04 UTC	946	IN	Data Raw: 44 6f 67 4d 54 4d 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4e 41 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 45 31 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 59 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4e 77 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 45 34 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 6b 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 79 4d 41 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 49 78 43 6d 4e 76 62 6e 5a 6c 63 6e 4e 70 62 32 35 66 62 57 56 68 63 33 56 79 5a 57 31 6c 62 6e 52 66 5a 47 6c 74 5a 57 35 7a 61 57 39 75 63 31 39 6b 59 58 52 68 49 48 73 4b 49 43 42 74 5a 57 46 7a 64 58 4a 6c Data Ascii: DogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfaWQ6IDE1CmFyY2hldHlwZV9pZDogMTYKYXJjaGV0eXBlX2lkOiAxNwphcmNoZXR5cGVfaWQ6IDE4CmFyY2hldHlwZV9pZDogMTkKYXJjaGV0eXBlX2lkOiAyMAphcmNoZXR5cGVfaWQ6IDIxCmNvbnZlcnNpb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJl
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50098	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	812	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&_u=YEBAAEAAAAAAACAAI~&z=677992896 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50097	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	2410	OUT	GET /activityi;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	1922	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9628652.fls.doubleclick.net/activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50102	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1303	OUT	GET /signals/config/816297701715444?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-26 04:12:05 UTC	1525	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-26 04:12:05 UTC	10	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 Data Ascii: /*** Copy
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 Data Ascii: right (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c Data Ascii: eturn;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModul
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 Data Ascii: t.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a](
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 72 6f 70 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 49 73 48 6f 73 74 46 61 63 65 62 6f 6f 6b 22 29 2c 62 3d 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3b 65 2e 65 78 70 6f 72 74 73 Data Ascii: ,b,c,d)});f.ensureModuleRegistered("signalsFBEventsShouldNotDropCookie",function(){return function(g,h,i,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsIsHostFacebook"),b="FirstPartyCookies";e.exports
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 20 41 28 29 7b 72 65 74 75 72 6e 22 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 7a 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 65 3d 6d 28 63 2c 73 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 6d 28 62 2e 72 65 66 65 72 72 65 72 2c 73 29 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 64 29 3b 69 66 28 65 21 3d Data Ascii: A(){return""+Math.round(z*Math.random())}function B(){var c=arguments.length>0&&arguments[0]!==void 0?arguments[0]:a.location.href,d=arguments.length>1&&arguments[1]!==void 0?arguments[1]:null,e=m(c,s);e===null&&(e=m(b.referrer,s));e===null&&(e=d);if(e!=
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 28 29 7b 6a 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 6f 28 62 2c 63 29 29 72 65 74 75 72 6e 7b 7d 3b 62 3d 7b 7d 3b 76 61 72 20 64 3d 42 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 29 2c 66 3d 43 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 2c 67 29 3b 68 3f 66 26 26 28 62 5b 75 5d 3d 66 2e 70 61 63 6b 28 29 29 3a 64 26 26 28 62 5b 75 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 66 3d 44 28 29 3b 66 26 26 28 62 5b 77 5d 3d 66 2e 70 61 63 6b 28 29 29 3b 72 65 74 75 72 6e 20 62 7d 29 7d 62 28 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 Data Ascii: (){j.listen(function(b){if(o(b,c))return{};b={};var d=B(a.location.href,e),f=C(a.location.href,e,g);h?f&&(b[u]=f.pack()):d&&(b[u]=d.pack());f=D();f&&(b[w]=f.pack());return b})}b()})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsF
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 64 3d 63 2e 63 6f 6e 66 69 67 4c 6f 61 64 65 64 2c 67 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 69 3d 68 2e 66 Data Ascii: odules("SignalsFBEventsConfigStore"),c=f.getFbeventsModules("SignalsFBEventsEvents"),d=c.configLoaded,g=f.getFbeventsModules("SignalsFBEventsLogging");c=f.getFbeventsModules("SignalsFBEventsPlugin");var h=f.getFbeventsModules("SignalsFBEventsUtils"),i=h.f
2024-04-26 04:12:05 UTC	1500	IN	Data Raw: 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 Data Ascii: age");return!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50101	13.249.98.43	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	959	OUT	GET /14e503e7ed5f221c.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	849	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 78460 Connection: close Date: Fri, 26 Apr 2024 04:12:05 GMT Last-Modified: Tue, 16 Apr 2024 11:18:34 GMT ETag: "013124ae3169de82174053e8cfd56e93" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: rT0Hqws7KfxZLIC1tTYLVbO9a_IOtsoP Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e1c42f7e378e3bdce50f3034fd2550f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P5 X-Amz-Cf-Id: 8VaOJGwXvRrBQyils7KhaWTVxCWpiDv_EM7RnWLwyPHOcjZS7KWyiQ== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-04-26 04:12:04 UTC	7537	IN	Data Raw: 76 61 72 20 44 65 6d 61 6e 64 62 61 73 65 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4d 2c 78 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 65 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 30 2c 6f 29 29 5b 6f 5d 3d 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 28 6e 7c 7c Data Ascii: var Demandbase=window.Demandbase\|\|{};!function(g){"use strict";var M,x=this&&this.__spreadArray\|\|function(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|((n=n\|\|Array.prototype.slice.call(e,0,o))[o]=e[o]);return t.concat(n\|\|
2024-04-26 04:12:05 UTC	16384	IN	Data Raw: 61 28 74 29 3a 74 2e 73 74 61 63 6b 26 26 74 2e 73 74 61 63 6b 2e 6d 61 74 63 68 28 48 29 3f 74 68 69 73 2e 70 61 72 73 65 56 38 4f 72 49 45 28 74 29 3a 74 2e 73 74 61 63 6b 3f 74 68 69 73 2e 70 61 72 73 65 46 46 4f 72 53 61 66 61 72 69 28 74 29 3a 76 6f 69 64 20 30 7d 3b 45 2e 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 49 2e 53 68 69 6d 73 2e 69 6e 64 65 78 4f 66 28 74 2c 22 3a 22 29 3f 5b 74 5d 3a 5b 28 74 3d 2f 28 2e 2b 3f 29 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 24 2f 2e 65 78 65 63 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 22 22 29 29 29 5b 31 5d 2c 74 5b 32 5d 7c 7c 76 6f 69 64 20 30 2c 74 5b 33 5d 7c 7c 76 6f 69 64 20 30 Data Ascii: a(t):t.stack&&t.stack.match(H)?this.parseV8OrIE(t):t.stack?this.parseFFOrSafari(t):void 0};E.extractLocation=function(t){return-1===I.Shims.indexOf(t,":")?[t]:[(t=/(.+?)(?:\:(\d+))?(?:\:(\d+))?$/.exec(t.replace(/[]/g,"")))[1],t[2]\|\|void 0,t[3]\|\|void 0
2024-04-26 04:12:05 UTC	16384	IN	Data Raw: 74 65 73 74 28 65 29 29 7d 3b 45 2e 69 73 53 74 6f 72 61 67 65 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 5b 74 2e 74 6f 53 74 72 69 6e 67 28 29 5d 3b 65 2e 73 65 74 49 74 65 6d 28 22 53 54 4f 52 41 47 45 5f 43 48 45 43 4b 22 2c 22 53 54 4f 52 41 47 45 5f 43 48 45 43 4b 22 29 2c 65 2e 67 65 74 49 74 65 6d 28 22 53 54 4f 52 41 47 45 5f 43 48 45 43 4b 22 29 3b 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 53 54 4f 52 41 47 45 5f 43 48 45 43 4b 22 29 3b 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 45 2e 6a 71 69 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 23 22 2e 63 6f 6e 63 61 74 28 74 2e 72 65 70 6c 61 63 65 28 2f 28 3a 7c 5c Data Ascii: test(e))};E.isStorageEnabled=function(t){try{var e=window[t.toString()];e.setItem("STORAGE_CHECK","STORAGE_CHECK"),e.getItem("STORAGE_CHECK");e.removeItem("STORAGE_CHECK");return!0}catch(t){return!1}};E.jqid=function(t){return t?"#".concat(t.replace(/(:\|\
2024-04-26 04:12:05 UTC	2048	IN	Data Raw: 3a 20 53 65 6e 74 20 43 75 73 74 6f 6d 20 55 41 20 45 76 65 6e 74 3a 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 69 29 29 7d 7d 3b 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 77 61 69 74 46 6f 72 47 41 54 72 61 63 6b 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 70 6f 6c 6c 69 6e 67 2e 68 61 73 42 65 65 6e 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 3b 69 66 28 28 77 69 6e 64 6f 77 2e 67 61 26 26 77 69 6e 64 6f 77 2e 67 61 2e 67 65 74 41 6c 6c 26 26 30 3c 77 69 6e 64 6f 77 2e 67 61 2e 67 65 74 41 6c 6c 28 29 2e 6c 65 6e 67 74 68 7c 7c 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 29 26 26 21 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 Data Ascii: : Sent Custom UA Event:".concat(t,"/").concat(e,"/").concat(i))}};t.prototype._waitForGATrackers=function(){this.configuration.polling.hasBeenInitialized=!1;if((window.ga&&window.ga.getAll&&0<window.ga.getAll().length\|\|window.dataLayer)&&!this.configurati
2024-04-26 04:12:05 UTC	16384	IN	Data Raw: 74 68 3b 65 2b 2b 29 7b 76 61 72 20 69 2c 6e 3d 28 69 3d 74 5b 65 5d 29 2e 67 65 74 28 22 6e 61 6d 65 22 29 3b 69 66 28 69 2e 67 65 74 28 22 74 72 61 63 6b 69 6e 67 49 64 22 29 3d 3d 3d 72 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 74 72 61 63 6b 65 72 49 64 29 72 65 74 75 72 6e 20 72 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 74 72 61 63 6b 65 72 4e 61 6d 65 3d 6e 2c 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 30 3c 74 2e 6c 65 6e 67 74 68 29 69 66 28 28 69 3d 74 5b 30 5d 7c 7c 6e 75 6c 6c 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 29 7b 76 61 72 20 6f 3d 69 2e 67 65 74 28 22 6e 61 6d 65 22 29 7c 7c 6e 75 6c 6c 3b 72 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 74 72 61 Data Ascii: th;e++){var i,n=(i=t[e]).get("name");if(i.get("trackingId")===r.configuration.trackerId)return r.configuration.trackerName=n,void 0}if(void 0!==t.length&&0<t.length)if((i=t[0]\|\|null)&&"function"==typeof i.get){var o=i.get("name")\|\|null;r.configuration.tra
2024-04-26 04:12:05 UTC	1024	IN	Data Raw: 69 6e 67 2e 6c 6f 67 28 22 53 69 74 65 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 2e 73 65 74 75 70 28 29 3a 20 61 6c 72 65 61 64 79 20 69 6e 69 74 69 6c 61 69 7a 65 64 21 20 6e 6f 74 20 72 75 6e 6e 69 6e 67 20 73 65 74 75 70 20 61 67 61 69 6e 2e 22 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 78 70 65 72 69 65 6e 63 65 73 29 7b 76 61 72 20 65 2c 69 3d 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 78 70 65 72 69 65 6e 63 65 73 7c 7c 7b 7d 2c 74 3d 76 2e 53 68 69 6d 73 2e 6b 65 79 73 28 69 29 7c 7c 5b 5d 3b 76 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 53 69 74 65 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 2e 73 65 74 75 70 28 29 3a 20 57 72 61 70 70 Data Ascii: ing.log("SiteCustomization.setup(): already initilaized! not running setup again.");else if(void 0!==this.configuration.experiences){var e,i=this.configuration.experiences\|\|{},t=v.Shims.keys(i)\|\|[];v.Utilities.Logging.log("SiteCustomization.setup(): Wrapp
2024-04-26 04:12:05 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 76 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 73 6f 72 74 45 78 70 65 72 69 65 6e 63 65 73 54 6f 46 69 72 65 28 29 3a 20 4e 6f 20 65 78 70 65 72 65 69 6e 63 65 73 20 72 65 74 75 72 6e 65 64 20 62 79 20 49 50 20 41 50 49 3a 20 22 2e 63 6f 6e 63 61 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 29 2c 5b 5d 3b 74 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 6f 2e 77 72 61 70 70 65 64 45 78 70 65 72 69 65 6e 63 65 73 5b 74 2e 69 64 5d 3f 6f 2e 77 72 61 70 70 65 64 45 78 70 65 72 69 65 6e 63 65 73 5b 74 2e 69 64 5d 2e 70 72 69 6f 72 69 74 79 3a 6e 75 6c 6c 2c 6e 3d 6f 2e 77 72 61 70 70 65 64 45 78 70 65 72 69 65 6e 63 65 73 5b 65 2e 69 64 5d 3f 6f 2e 77 72 61 70 70 Data Ascii: return v.Utilities.Logging.log("sortExperiencesToFire(): No expereinces returned by IP API: ".concat(JSON.stringify(t))),[];t.sort(function(t,e){var i=o.wrappedExperiences[t.id]?o.wrappedExperiences[t.id].priority:null,n=o.wrappedExperiences[e.id]?o.wrapp
2024-04-26 04:12:05 UTC	2315	IN	Data Raw: 72 61 6d 65 3d 4e 2e 55 74 69 6c 69 74 69 65 73 2e 64 65 74 65 63 74 49 46 72 61 6d 65 28 29 29 3b 4e 2e 41 73 73 65 74 52 65 70 6f 72 74 65 72 3d 6e 65 77 20 4e 2e 41 73 73 65 74 52 65 70 6f 72 74 65 72 4d 6f 64 75 6c 65 3b 4e 2e 41 73 73 65 74 52 65 70 6f 72 74 65 72 2e 69 73 45 6e 61 62 6c 65 64 28 29 26 26 4e 2e 41 73 73 65 74 52 65 70 6f 72 74 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 28 29 3b 4e 2e 41 64 76 65 72 74 69 73 69 6e 67 3d 6e 65 77 20 4e 2e 41 64 76 65 72 74 69 73 69 6e 67 4d 6f 64 75 6c 65 3b 4e 2e 41 64 73 3d 4e 2e 41 64 76 65 72 74 69 73 69 6e 67 3b 69 66 28 4e 2e 41 64 76 65 72 74 69 73 69 6e 67 2e 69 73 45 6e 61 62 6c 65 64 28 29 29 7b 4e 2e 49 70 41 70 69 52 65 70 6f 72 74 69 6e 67 4f 6e 6c 79 3d 6e 65 77 20 4e 2e 49 70 41 70 69 4d 6f Data Ascii: rame=N.Utilities.detectIFrame());N.AssetReporter=new N.AssetReporterModule;N.AssetReporter.isEnabled()&&N.AssetReporter.initialize();N.Advertising=new N.AdvertisingModule;N.Ads=N.Advertising;if(N.Advertising.isEnabled()){N.IpApiReportingOnly=new N.IpApiMo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50110	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	569	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Thu, 25 Apr 2024 02:29:05 GMT ETag: 0x8DC64CF7A8E9A99 x-ms-request-id: f7f55f7d-b01e-0083-72c2-9627e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56938 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb81bf173347-MIA
2024-04-26 04:12:04 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50105	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1407	OUT	GET /pagead/viewthroughconversion/984344943/?random=1714104722646&cv=11&fst=1714104722646&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmXk_dIGcYVZjwqjvfNiePb9ox6wVLVeqSYSGIXbhxpKPIVN2ONrcDTrKBj; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	244	IN	Data Raw: 61 65 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: ae7(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4d 44 51 33 4d 6a 49 32 4e 44 59 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxMDQ3MjI2NDY',['https://www.google.com/pagead/1p-user-lis
2024-04-26 04:12:04 UTC	44	IN	Data Raw: 34 32 33 36 33 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 42363\x26rmt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50107	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1433	OUT	GET /pagead/viewthroughconversion/984344943/?random=1714104722660&cv=11&fst=1714104722660&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:04 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmyCEu96ddAuwPh6SzBq2WGj28c54rmkb-j35ZJ3jcYwSu1pdrEn8oVvnaH; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:04 UTC	244	IN	Data Raw: 62 32 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: b22(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:04 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 59 54 4d 34 52 55 4e 50 62 6b 38 33 5a 31 46 52 4e 7a 6c 4c 64 6a 46 52 54 54 6f 78 4e 7a 45 30 4d 54 41 30 4e 7a 49 79 4e 6a 59 77 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'YTM4RUNPbk83Z1FRNzlLdjFRTToxNzE0MTA0NzIyNjYw',['https://www.goog
2024-04-26 04:12:04 UTC	103	IN	Data Raw: 4b 71 48 75 77 78 50 30 55 69 47 7a 57 53 63 69 31 63 76 4f 4c 66 75 67 75 73 37 58 77 79 33 61 63 4e 4d 2d 31 73 58 7a 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 39 30 32 32 39 39 39 35 33 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: KqHuwxP0UiGzWSci1cvOLfugus7Xwy3acNM-1sXz\x26random\x3d1902299953\x26rmt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50113	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	393	OUT	GET /scripttemplates/202301.2.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Z9ctTlIOTjmEMU/y5+FSYA== Last-Modified: Fri, 17 Feb 2023 03:39:06 GMT x-ms-request-id: bce0a873-f01e-0049-5f66-0c7b68000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 26838 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb8228532594-MIA
2024-04-26 04:12:04 UTC	560	IN	Data Raw: 37 63 37 39 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c79 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 62 47 46 69 5a 57 77 67 5a 6d 39 79 50 53 4a 32 5a 57 35 6b 62 33 49 74 63 32 56 68 63 6d 4e 6f 4c 57 68 68 62 6d 52 73 5a 58 49 69 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 59 33 4a 75 4c 58 4a 6b 63 69 49 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 47 6c 75 63 48 56 30 49 47 6c 6b 50 53 4a 32 5a 57 35 6b 62 33 49 74 63 32 56 68 63 6d 4e 6f 4c Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48bGFiZWwgZm9yPSJ2ZW5kb3Itc2VhcmNoLWhhbmRsZXIiIGNsYXNzPSJvdC1zY3JuLXJkciI+PC9sYWJlbD4gPGlucHV0IGlkPSJ2ZW5kb3Itc2VhcmNoL
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 49 48 67 39 49 6a 42 77 65 43 49 67 65 54 30 69 4d 48 42 34 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4e 44 41 79 4c 6a 55 33 4e 79 41 30 4d 44 49 75 4e 54 63 33 49 69 42 34 62 57 77 36 63 33 42 68 59 32 55 39 49 6e 42 79 5a 58 4e 6c 63 6e 5a 6c 49 6a 34 38 64 47 6c 30 62 47 55 2b 52 6d 6c 73 64 47 56 79 49 45 6c 6a 62 32 34 38 4c 33 52 70 64 47 78 6c 50 6a 78 6e 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4e 6d 5a 6d 59 69 49 47 51 39 49 6b 30 30 4d 44 41 75 4f 44 55 34 4c 44 45 78 4c 6a 51 79 4e 32 4d 74 4d 79 34 79 4e 44 45 74 4e 79 34 30 4d 6a 45 74 4f 43 Data Ascii: geG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiIHg9IjBweCIgeT0iMHB4IiB2aWV3Qm94PSIwIDAgNDAyLjU3NyA0MDIuNTc3IiB4bWw6c3BhY2U9InByZXNlcnZlIj48dGl0bGU+RmlsdGVyIEljb248L3RpdGxlPjxnPjxwYXRoIGZpbGw9IiNmZmYiIGQ9Ik00MDAuODU4LDExLjQyN2MtMy4yNDEtNy40MjEtOC
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 62 6e 51 67 62 33 51 74 63 47 4d 74 63 32 4e 79 62 32 78 73 59 6d 46 79 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 6d 78 72 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 68 6b 63 69 49 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 76 62 6e 4e 6c 62 6e 51 74 61 47 52 79 49 6a 35 44 62 32 35 7a 5a 57 35 30 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6b 74 61 47 52 79 49 6a 35 4d 5a 57 63 75 53 57 35 30 5a 58 4a 6c 63 33 51 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 Data Ascii: bnQgb3QtcGMtc2Nyb2xsYmFyIj48ZGl2IGlkPSJvdC1zZWwtYmxrIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWhkciI+PHNwYW4gY2xhc3M9Im90LWNvbnNlbnQtaGRyIj5Db25zZW50PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGktaGRyIj5MZWcuSW50ZXJlc3Q8L3NwYW4+PC9kaXY+PGRpdiB
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 57 4e 35 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 68 6b 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 59 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 78 70 62 6d 73 69 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6c 5a 70 5a 58 63 67 55 48 4a 70 64 6d 46 6a 65 53 42 4f 62 33 52 70 59 32 55 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 30 62 32 64 6e 62 47 56 7a 49 47 46 75 5a 43 42 68 63 6e 4a 76 64 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 30 5a 32 77 74 59 32 35 30 63 69 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 7a 5a 57 4e 30 61 57 39 75 Data Ascii: WN5IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtdmVuLWhkciI+PGgzIGNsYXNzPSJvdC12ZW4tbmFtZSI+PC9oMz48YSBjbGFzcz0ib3QtdmVuLWxpbmsiIGhyZWY9IiMiPlZpZXcgUHJpdmFjeSBOb3RpY2U8L2E+PC9kaXY+PCEtLSB0b2dnbGVzIGFuZCBhcnJvdyAtLT48ZGl2IGNsYXNzPSJvdC10Z2wtY250ciI+PC9kaXY+PC9zZWN0aW9u
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 4e 30 4c 57 4e 75 64 48 49 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 70 62 6d 73 74 59 6e 52 75 49 47 4e 68 64 47 56 6e 62 33 4a 35 4c 58 5a 6c 62 6d 52 76 63 6e 4d 74 62 47 6c 7a 64 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 57 61 57 56 33 49 46 5a 6c 62 6d 52 76 63 69 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 32 39 72 61 57 55 67 62 47 39 7a 64 43 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 68 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 61 47 39 7a 64 43 31 73 61 Data Ascii: N0LWNudHIiPjxidXR0b24gY2xhc3M9Im90LWxpbmstYnRuIGNhdGVnb3J5LXZlbmRvcnMtbGlzdC1oYW5kbGVyIj5WaWV3IFZlbmRvciBMaXN0PC9idXR0b24+PC9kaXY+PCEtLSBDb29raWUgbG9zdCBsaW5rIC0tPjxkaXYgY2xhc3M9Im90LWhsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktaG9zdC1sa
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 39 49 6d 4e 68 63 6d 56 30 4c 58 4a 70 5a 32 68 30 49 69 42 79 62 32 78 6c 50 53 4a 70 62 57 63 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 45 35 4d 69 41 31 4d 54 49 69 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 6d 4e 31 63 6e 4a 6c 62 6e 52 44 62 32 78 76 63 69 49 67 5a 44 30 69 54 54 45 32 4e 69 34 35 49 44 49 32 4e 43 34 31 62 43 30 78 4d 54 63 75 4f 43 41 78 4d 54 5a 6a 4c 54 51 75 4e 79 41 30 4c 6a 63 74 4d 54 49 75 4d 79 41 30 4c 6a 63 74 4d 54 63 67 4d 47 77 74 4e 79 34 78 4c 54 63 75 4d 57 4d 74 4e 43 34 33 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4d 54 49 75 4d 79 41 77 4c 54 45 33 54 44 Data Ascii: 9ImNhcmV0LXJpZ2h0IiByb2xlPSJpbWciIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgdmlld0JveD0iMCAwIDE5MiA1MTIiPjxwYXRoIGZpbGw9ImN1cnJlbnRDb2xvciIgZD0iTTE2Ni45IDI2NC41bC0xMTcuOCAxMTZjLTQuNyA0LjctMTIuMyA0LjctMTcgMGwtNy4xLTcuMWMtNC43LTQuNy00LjctMTIuMyAwLTE3TD
2024-04-26 04:12:04 UTC	1369	IN	Data Raw: 53 57 35 6d 62 33 4a 74 59 58 52 70 62 32 34 67 63 33 52 76 63 6d 46 6e 5a 53 42 68 62 6d 51 67 59 57 4e 6a 5a 58 4e 7a 49 48 52 6c 63 33 51 38 4c 32 67 30 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 59 57 4e 6a 62 33 4a 6b 61 57 39 75 49 47 52 6c 64 47 46 70 62 43 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 68 59 32 4d 74 5a 33 4a 77 59 32 35 30 63 69 42 76 64 43 31 68 59 32 4d 74 64 48 68 30 49 47 39 30 4c 58 5a 75 5a 43 31 70 62 6d 5a 76 4c 57 4e 75 64 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 70 62 6d 5a 76 49 6a 34 38 61 44 55 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 73 59 6d 77 69 50 6c 4e 6c 63 6e 5a 70 59 32 55 67 54 6d 46 74 5a 54 77 76 61 44 55 Data Ascii: SW5mb3JtYXRpb24gc3RvcmFnZSBhbmQgYWNjZXNzIHRlc3Q8L2g0PjwvZGl2PjwhLS0gYWNjb3JkaW9uIGRldGFpbCAtLT48ZGl2IGNsYXNzPSJvdC1hY2MtZ3JwY250ciBvdC1hY2MtdHh0IG90LXZuZC1pbmZvLWNudHIiPjxkaXYgY2xhc3M9Im90LXZuZC1pbmZvIj48aDUgY2xhc3M9Im90LXZuZC1sYmwiPlNlcnZpY2UgTmFtZTwvaDU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50112	52.46.155.104	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1061	OUT	GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ\|t
2024-04-26 04:12:05 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: FM8Z2FK3ZQMRZZWMENYZ Set-Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 04:12:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 04:12:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-26 04:12:05 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50106	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1407	OUT	GET /pagead/viewthroughconversion/984344943/?random=1714104722664&cv=11&fst=1714104722664&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmr1FICvyJ4JojaglZQ3m8OHxzrjf6xzWMVtXIJxn9NtlCbdwlvGTMriibV; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	244	IN	Data Raw: 61 65 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: ae8(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4d 44 51 33 4d 6a 49 32 4e 6a 51 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxMDQ3MjI2NjQ',['https://www.google.com/pagead/1p-user-lis
2024-04-26 04:12:05 UTC	45	IN	Data Raw: 39 37 34 36 34 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 974641\x26rmt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50108	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1433	OUT	GET /pagead/viewthroughconversion/984344943/?random=1714104722667&cv=11&fst=1714104722667&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkgBOlyGsZr-Ae-Cng2VBMFOY2ZrYtqZykZsUVAyYO3vwldCOfJ-tNXrqRY; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	244	IN	Data Raw: 62 32 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: b22(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 59 54 4d 34 52 55 4e 50 62 6b 38 33 5a 31 46 52 4e 7a 6c 4c 64 6a 46 52 54 54 6f 78 4e 7a 45 30 4d 54 41 30 4e 7a 49 79 4e 6a 59 33 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'YTM4RUNPbk83Z1FRNzlLdjFRTToxNzE0MTA0NzIyNjY3',['https://www.goog
2024-04-26 04:12:05 UTC	103	IN	Data Raw: 65 32 6a 68 50 43 4e 6d 46 63 47 43 44 55 4a 43 62 57 4e 44 43 67 44 4d 64 73 53 52 6d 74 6b 43 7a 68 71 37 57 35 45 64 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 36 36 39 30 30 38 38 37 35 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: e2jhPCNmFcGCDUJCbWNDCgDMdsSRmtkCzhq7W5Ed\x26random\x3d2669008875\x26rmt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50103	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1397	OUT	GET /pagead/viewthroughconversion/746791505/?random=1714104722850&cv=11&fst=1714104722850&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUk_oY0gSFnlHC-LamALRQDfcAl8D2nS1WGYPyJXbIK-Cobgbcp96NkyPFj2; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	244	IN	Data Raw: 61 64 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: add(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4d 44 51 33 4d 6a 49 34 4e 54 41 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxMDQ3MjI4NTA',['https://www.google.com/pagead/1p-user-lis
2024-04-26 04:12:05 UTC	34	IN	Data Raw: 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: mt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50104	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1397	OUT	GET /pagead/viewthroughconversion/746791505/?random=1714104722873&cv=11&fst=1714104722873&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlCR7-W_VY6IafMvHSVLAAx79-mCyEtJ5HBjNSQ1LNubjoX-hu-eHnJ6DGU; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	244	IN	Data Raw: 61 64 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: adf(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-26 04:12:05 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 78 4d 44 51 33 4d 6a 49 34 4e 7a 4d 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQxMDQ3MjI4NzM',['https://www.google.com/pagead/1p-user-lis
2024-04-26 04:12:05 UTC	36	IN	Data Raw: 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 6rmt_tld\x3d0\x26ipr\x3dy']);})();
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50114	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1407	OUT	GET /ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9628652.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50115	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	2216	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://9628652.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	2536	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2247068054722482789"}],"aggregatable_trigger_data":[{"filters":[{"14":["12867063"]}],"key_piece":"0xbf1cbafe44381379","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe1dd06ab03085d8f","not_filters":{"14":["12867063"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["12867063"]}],"key_piece":"0xe49fad3b08775540","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x77bf77df5630eae0","not_filters":{"14":["12867063"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"14155412300202563979","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUn5rz9_4Gg1JY61pLNC0ojtWTk4yvY61XEC8UdLkYsVTvYfFKu7XERKAXYZ; expires=Sun, 26-Apr-2026 04:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50119	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1159	OUT	POST /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Content-Length: 451 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer h9NabsHpt@Pg!yuUtRn6ja.TGMQXx@BAXjAhhM6i9yPzKQKJKMw2sbtEEAsqMry User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	451	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 22 52 6f 6b 75 20 2d 20 55 53 20 2d 20 41 6c 6c 20 50 61 67 65 20 76 69 65 77 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 30 34 37 32 30 2e 33 37 7d 5d 2c 22 62 71 54 61 62 6c 65 22 3a 22 72 61 77 5f 64 61 74 61 22 2c 22 62 71 44 61 74 61 73 65 74 22 3a 22 67 74 6d 5f 6d 6f 6e 69 74 6f 72 69 6e 67 22 2c 22 63 6f 6c 75 6d 6e 73 46 72 6f 6d 56 61 72 69 61 62 6c 65 73 22 3a 7b 22 61 76 74 22 3a 22 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 Data Ascii: {"data":[{"tagName":"Roku - US - All Page view","status":"success","tagTimestamp":1714104720.37}],"bqTable":"raw_data","bqDataset":"gtm_monitoring","columnsFromVariables":{"avt":"f4d668d2-779c-4df7-a4fc-07c00f1a3ade","url":"https://squareup.com/signup?app
2024-04-26 04:12:05 UTC	343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Function-Execution-Id: qmi4vjag0woa X-Cloud-Trace-Context: 1b0c6675c7852995b37d6d8f4149c74a Date: Fri, 26 Apr 2024 04:12:05 GMT Server: Google Frontend Content-Length: 94 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	94	IN	Data Raw: 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 20 22 52 6f 6b 75 20 2d 20 55 53 20 2d 20 41 6c 6c 20 50 61 67 65 20 76 69 65 77 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 73 75 63 63 65 73 73 22 2c 20 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 20 31 37 31 34 31 30 34 37 32 30 2e 33 37 7d 5d Data Ascii: [{"tagName": "Roku - US - All Page view", "status": "success", "tagTimestamp": 1714104720.37}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50109	44.207.205.64	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	955	OUT	GET /scripts/lt-v4.js?llid=30484 HTTP/1.1 Host: lltrck.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:04 UTC	148	IN	HTTP/1.1 403 Forbidden Server: awselb/2.0 Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: text/html Content-Length: 520 Connection: close
2024-04-26 04:12:04 UTC	520	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page --><!-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50116	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1227	OUT	GET /track/upb/?adv=atphjrs&ref=https%3A%2F%2Fsquareup.com%2F&upid=ryupk6w&upv=1.1.0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f
2024-04-26 04:12:04 UTC	553	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: text/html Content-Length: 938 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIYXBwbmV4dXMSCwjCxNyFouzyPBAFEhYKB3J1Ymljb24SCwj06NyFouzyPBAFEhUKBmdvb2dsZRILCICJ3YWi7PI8EAUYBSgDMgsIspzfsrjs8jwQBUIPIg0IARIJCgV0aWVyMxABWgdhdHBoanJzYAE.; expires=Sat, 26 Apr 2025 04:12:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:04 UTC	938	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50117	52.223.40.198	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	1227	OUT	GET /track/up?adv=lb8beig&ref=https%3A%2F%2Fsquareup.com%2F&upid=wf1vc7l&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f
2024-04-26 04:12:04 UTC	553	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:04 GMT Content-Type: text/html Content-Length: 938 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.; expires=Sat, 26 Apr 2025 04:12:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:04 UTC	938	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50120	146.75.124.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	940	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4778 ETag: "a2a93a7555e1e5d3d59e9ac8d0f42647" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Fri, 26 Apr 2024 04:12:05 GMT
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 Data Ascii: m()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.oner
2024-04-26 04:12:05 UTC	644	IN	Data Raw: 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e Data Ascii: n(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.1b7f3d0e.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50121	151.101.193.140	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:04 UTC	950	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11214 Last-Modified: Wed, 24 Apr 2024 17:35:49 GMT ETag: "c4d61fbb6e730a840c7f140cbb9bcd06" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:05 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 19 cb 80 b1 93 08 6b 5d 04 e4 98 8d 0d be 3c 9c 6c b9 58 4a 96 06 50 02 12 2b 89 38 be c0 fd ed b7 e7 25 8d 04 b6 93 b3 77 3f dc 54 0a cd 74 f7 f4 f4 6b 7a 7a 46 f2 c1 64 e5 3b b1 17 f8 85 50 c5 c8 47 b1 b6 4e 20 81 ea a1 89 b6 f6 26 ea 81 7f ef 8d 58 0b d3 d6 77 3b 2c 38 a6 22 48 15 d3 8c 9f 96 38 98 14 42 fc d7 ca 0b 71 b1 c8 1b 75 32 66 52 2c 3a 5a 88 e3 55 e8 17 1c 60 7a 50 d6 08 7c 25 60 2b 0e 23 5c 6d d3 c7 8f 05 2b 0c 83 50 55 9a b6 ef 07 71 61 e2 f9 6e 61 11 b8 ab 39 2e fc 5b 29 79 25 e5 df 8a 56 8f 67 61 f0 58 b0 75 27 70 b1 a9 dc 74 5b c3 6b 6b dc e9 0e c6 97 dd 61 a7 a5 20 7b 4b f8 2d 4d 22 bb b9 c6 3f 96 41 18 47 c6 7a bb ad 13 1d ee cb 23 dd b1 e7 73 75 a9 73 14 12 da a8 a1 Data Ascii: ;ksN8k]<lXJP+8%w?TtkzzFd;PGN &Xw;,8"H8Bqu2fR,:ZU`zP\|%`+#\m+PUqana9.[)y%VgaXu'pt[kka {K-M"?AGz#sus
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 0d 3c 5f 55 48 15 b2 84 ae 14 0a 40 01 e3 52 e5 59 ff 9a 45 13 eb f0 d8 42 39 2f ca 94 c4 97 55 2d d5 ee 04 16 29 9d 88 78 90 73 81 cd 13 ec 0f 67 c1 aa 86 40 46 ba 76 bd 37 ef 0e 6b af fa 57 9e e9 b8 4a 72 fd 35 54 64 7e 85 bb 96 77 fe 31 ef ce 29 ff bf ef 60 89 0f 73 1e 73 98 3e 09 83 05 81 36 61 1b a0 6e 4f fd 27 0f 79 d6 85 8c 28 e3 c5 04 c4 1d 99 f4 9f f1 65 8e 9e 2a 25 ab b2 31 55 d0 a0 98 b2 71 b8 bc 8d 58 f5 34 e1 4b 50 f4 55 5f e6 66 22 ce 1c c6 93 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f6 da cd 60 b1 84 4c 04 c1 86 23 c7 5e 62 95 c5 84 b4 9b a6 0c b4 a4 dc 07 5e f9 52 ff c6 9e 83 0d 17 50 cd 0f 07 97 47 ef 0a ae 1d db 0a 11 32 67 f3 15 08 4a 2d ce 25 e1 f3 51 2a 75 e5 73 29 d8 d6 9e 91 4f 0c d4 08 d3 0f ab c9 04 87 d8 fd 30 0f 9c 6f 8d f9 34 Data Ascii: <_UH@RYEB9/U-)xsg@Fv7kWJr5Td~w1)`ss>6anO'y(e%1UqX4KPU_f"w#d`L#^b^RPG2gJ-%Qus)O0o4
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 40 7b d5 11 0d 88 92 43 7b 27 23 1a 17 25 97 f6 6a 23 1a 1e 25 4c 7b a7 23 1a 25 a5 09 ed 9d 8d 68 b0 94 a6 b4 f7 76 44 63 a6 34 db 94 69 b8 5e ee d4 43 2c db fd d4 a9 c6 27 4b 70 10 c4 f6 dc 7c 77 98 3f 56 31 ec 35 9e c4 80 cc 14 d8 a2 16 48 78 de 27 a4 60 d4 53 38 d9 57 aa ef e8 f9 3d 81 bf 39 a9 a6 22 dc 57 6a 25 35 41 95 ce 6a 30 ea fd f9 79 4d 1b b1 cc 38 99 07 b0 c8 52 e1 8e d3 e4 a5 c9 5c 4e 9f e3 92 0e cd 9e 0c cc da 61 7a 92 e0 b7 16 fb ca 4c b6 aa 5f 3c 04 f0 bc f3 ca 31 80 26 1d 29 4f 64 8f 01 50 65 35 73 79 2c 53 6a aa 0c 47 ca 32 52 0f ee a7 4c 0a 45 41 cd 0b 36 94 d4 09 0c fe ff b1 4c 38 fd 89 32 41 59 45 b8 40 2e 16 40 33 ba 57 78 2e 6a 76 3b fd 41 a3 33 e8 9b 19 d9 e9 4b b0 38 52 c8 85 27 b1 98 8c 65 10 40 91 37 c8 00 c6 51 4c 77 8b 2f 37 Data Ascii: @{C{'#%j#%L{#%hvDc4i^C,'Kp\|w?V15Hx'`S8W=9"Wj%5Aj0yM8R\NazL_<1&)OdPe5sy,SjG2RLEA6L82AYE@.@3Wx.jv;A3K8R'e@7QLw/7
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 8f f1 a0 3b 4e 21 2c c9 8f f7 67 f9 f1 4f a7 79 c2 74 5f a2 27 f0 bf 95 ea c7 2f e6 fa 41 af fd f1 a3 d5 e3 9a d0 ed 14 b0 e4 a1 20 6a 79 f8 01 b2 be 75 6d 35 07 dd 0c dd b8 d9 ef 73 5a d2 54 f8 66 3c b0 be 0c 04 98 b4 29 1f 6a 87 46 bb d3 a7 0c 93 1e c3 59 5f 20 5d 31 04 6d 2a 5b f2 8f 7e 11 fd f6 3f 39 7e bc 7a f6 80 b2 ee bf 56 38 7c 82 fc 0c 89 25 ce 1e 43 fe 22 18 f1 7d 9b be 43 8a 58 d1 1d c9 43 38 08 38 93 ca e1 7b 4d c6 d1 5a 42 43 36 38 ce 5b 40 a9 09 b5 10 78 97 ee 09 69 2d 4a 88 92 2f c7 c8 99 a7 45 5e 8b 90 c9 c9 20 55 2b 29 ba 52 22 44 db 3a 57 5b df cb 70 1f 50 18 8a 5c d0 91 8b bf 21 b0 b9 24 df 26 50 ec 5d 35 95 c2 61 10 92 1e f9 47 a0 cb b9 17 9b 12 98 be fb 83 ba 5c 57 92 63 36 85 f0 93 fc 79 f5 42 22 36 28 ea be 32 da 26 22 b0 f2 7e 77 Data Ascii: ;N!,gOyt_'/A jyum5sZTf<)jFY_ ]1m*[~?9~zV8\|%C"}CXC88{MZBC68[@xi-J/E^ U+)R"D:W[pP\!$&P]5aG\Wc6yB"6(2&"~w
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 3c 07 c3 0a 58 61 e4 35 7a 76 39 18 a7 6c 3e c9 fe 64 ae 7d ba 00 c1 d1 9b cc 6d 70 a5 d0 d1 b2 ec 56 72 1f 57 a5 2e cc e9 b7 e8 55 d5 db d9 ed c8 b9 24 b8 e6 a4 d1 70 fc 49 2e 02 03 98 5f 4e 07 e7 e1 ac f2 97 21 dc a7 f0 4e aa 8d 6c 9d 74 6c 67 f9 74 30 2a 93 0a 9f 2f 07 83 59 c2 aa 30 e4 30 99 c9 8b f7 0e b4 22 d9 55 d6 e2 60 ae 37 7a 19 50 b4 78 3d 90 cc 8f 92 ca 16 79 74 0c c7 f7 ed d1 c2 3e a0 4b 67 1d 61 bf 56 5e b9 1c 74 fb b9 f2 f9 34 e3 c2 e4 99 0f 93 fe 2d af c7 be 85 25 43 2e 05 b6 14 ab 63 d8 35 fd 5f 87 dd fd 7e f5 cb 91 51 1b 6c 37 9f c5 2f 31 46 1c 52 86 83 33 d8 76 67 60 58 9e 4d e7 52 b0 5a 6a 1e e8 a3 2e fd 02 73 1f 00 2b c2 81 79 65 bd 63 9c eb 57 40 66 a3 b1 e9 6c 7b c9 2e e8 9d 41 86 76 c6 a2 ed 6e b7 82 e2 11 4b af b5 89 2a f7 b1 5e Data Ascii: <Xa5zv9l>d}mpVrW.U$pI._N!Nltlgt0/Y00"U`7zPx=yt>KgaV^t4-%C.c5_~Ql7/1FR3vg`XMRZj.s+yecW@fl{.AvnK^
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: b6 9e 50 09 9d 68 11 54 7b 69 d4 48 a8 4b a6 23 57 14 28 7b b5 92 4f 55 7b fc d5 68 04 89 37 b0 bc 8d 7f e5 d5 f8 7a d4 ed 0d d2 9d d3 df 77 b7 7f 7c 9f 77 76 2e 86 22 49 b2 02 ab 9d b1 f6 68 31 dd 0c ab a3 b1 bc 7f 41 51 7b 30 ca b1 21 1a ef e1 fd 74 e9 e4 1a d0 54 a7 f2 91 5e 7c 20 79 6c 7f 70 23 67 5d a2 2b 64 31 fc ab bc 14 17 8b 24 e1 ba 57 83 5f 1b e8 8f 5e c3 b5 11 ac 1d b2 1d c5 46 70 78 db b5 6e 40 b3 e7 b5 f0 19 a3 cf 9d 59 86 35 ab 1f d0 b6 7a 29 52 e8 c5 57 46 f6 07 6b 61 b8 b4 48 ac db b5 dc 8e 38 50 0f c7 81 5e d9 b2 b9 76 1e 7e 38 06 ed 53 6c 3c e9 ee f8 39 c2 f2 32 42 7e 48 9e 05 10 b2 ff 41 a1 fc 3f 96 ef 2f d3 ea 61 39 cc 12 04 b3 fa 75 20 26 0c 8c 8d 1b a6 c4 e4 72 fc f0 71 99 de 19 37 e9 c2 5d ca c1 e6 76 86 3c 53 c3 b7 ae 91 33 c6 99 Data Ascii: PhT{iHK#W({OU{h7zw\|wv."Ih1AQ{0!tT^\| ylp#g]+d1$W_^Fpxn@Y5z)RWFkaH8P^v~8Sl<92B~HA?/a9u &rq7]v<S3
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 56 c2 62 e8 8a 48 f0 1f 80 be 91 e7 c5 b8 3b 3a 5b d3 85 86 03 ff 27 fb 0c bc ab 7f de 5d d9 12 00 44 02 7f 5d 4e 57 70 96 06 ab fe c8 fe 7e 33 9d 7c 96 ac 7b ea e0 b1 d5 99 98 5c cf ce 26 f2 22 ce ea 65 d1 f1 7c d6 6e 16 bb a2 ba 2c ec 60 e6 d5 25 38 67 f3 82 2f e2 33 a5 15 79 fc a1 db ec f5 fb e7 f2 2e e8 49 43 68 fb 30 59 af 54 02 37 c9 b1 8e 49 e3 a8 14 0f e3 c9 f4 0a b9 cf 8b 18 10 a7 be 7f 7d 25 9c 9f bd 9e fb 7b da e3 93 0e f0 65 b4 67 c4 e4 00 f6 7a b5 90 b2 13 07 74 5a 0f 3a ed 2d f9 ab d3 ee af 74 5a 81 e7 4a 8f 45 9f c0 29 37 d3 a4 ae 2e 19 8e d9 7e 90 0c 6c 73 93 bd 67 5d 2b 51 c3 08 d2 5a 56 0c 8c 97 05 69 91 b0 17 1e bd 35 ee ad 72 87 81 a3 3a 6e 5e 24 04 ae 18 e8 59 24 ff 0d 02 08 c1 e4 94 c9 55 05 9f d2 81 e3 d0 5c af 4c 53 e5 9e 8b 31 88 Data Ascii: VbH;:[']D]NWp~3\|{\&"e\|n,`%8g/3y.ICh0YT7I}%{egztZ:-tZJE)7.~lsg]+QZVi5r:n^$Y$U\LS1
2024-04-26 04:12:05 UTC	1378	IN	Data Raw: 74 ac c6 d7 21 af 3d 1c 54 d4 de ac d2 5d 06 5e 73 f1 9d 58 ac 06 6b ad ea c2 38 27 3e fc 2d 38 b8 fb 52 9d d2 0e cf b2 16 93 9b 2b 37 1c e8 70 ea ef 89 aa 13 aa 3e be 12 51 90 84 bd 06 30 cb ea 21 1d ce f2 4d 6f e9 60 fa 86 97 74 f1 dc 93 72 65 30 64 79 81 0f bd 73 65 1d c3 6e 79 f4 f9 a8 3a a5 d9 b8 cf dd ec c3 fe 9b 05 2d 33 15 26 44 19 8a d7 10 a6 f9 b1 4f 8f d3 9c 11 f3 46 95 fb 54 b8 f0 36 20 6c 50 77 5c af b9 dc 45 0f eb f8 e5 ae 35 e0 ac d0 f0 5a 97 c0 76 94 41 16 52 72 57 c7 2f 22 61 ec 52 bf 28 bb ad aa 12 ba a0 98 5f e6 8a 02 df ea a9 94 b0 69 6a 33 b8 d7 e9 5f 3c 1c de 40 d8 db 9c b9 4c 0c 2b f4 b3 b0 30 8b 85 79 2e cd 50 b3 51 36 54 f7 0d d9 26 98 51 83 07 a3 ab 2a 4a 0d 00 a1 77 01 22 39 75 a6 97 33 33 b6 aa 49 8e fa d0 61 a5 dc ad 6d 69 d6 Data Ascii: t!=T]^sXk8'>-8R+7p>Q0!Mo`tre0dyseny:-3&DOFT6 lPw\E5ZvARrW/"aR(_ij3_<@L+0y.PQ6T&Q*Jw"9u33Iami
2024-04-26 04:12:05 UTC	190	IN	Data Raw: 73 b1 d0 72 e8 a6 23 da 2e 16 9b 6e 6b 6a e7 da f4 ed 82 f6 0c f8 a6 a2 54 52 20 02 c5 2d f6 0c bd a7 74 31 1b 5f 8b e1 3c e3 81 17 59 8b 5f d0 de 65 f3 71 6a d0 76 32 b7 bd da 73 9c b4 f6 b7 ca 56 bb 49 a1 0e 45 7b 39 27 cd b9 24 8a 6d d4 08 55 fa 98 f4 1b 3a 6b 19 57 6e db 03 29 a4 a0 c8 d4 02 24 5a a6 1e 90 4a 78 1a 4a 98 c5 63 11 ca a5 05 f8 da ec fd 6d 32 93 f0 4f 8f 44 7c cb 19 5f 66 9e e5 77 2a 14 c0 29 43 a7 51 ab 47 88 7e d2 2f 87 2f f8 a9 a1 bd 07 68 ab 3f 38 ef ce 47 b3 fb 36 a1 ef 05 d6 84 5f 83 35 5a 9c 36 7f e8 64 ad 7f f8 1f 4f 0d f9 40 4b 99 00 00 Data Ascii: sr#.nkjTR -t1_<Y_eqjv2sVIE{9'$mU:kWn)$ZJxJcm2OD\|_fw*)CQG~//h?8G6_5Z6dO@K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50123	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1619	OUT	GET /td/rul/630646945?random=1714104722909&cv=11&fst=1714104722909&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnfsHXR4X2giVlnQ8eGbaUvTf95mhvBt6kHgLLiHvHEZj5HpJ-OAzKfMoGy; expires=Sun, 26-Apr-2026 04:12:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50124	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1619	OUT	GET /td/rul/630646945?random=1714104722926&cv=11&fst=1714104722926&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUn-PXiIvXEL6C1Smk_VUCbFTVhW9A4ROwhhbcyrkA4_TWiDY04XN8AeGlGp; expires=Sun, 26-Apr-2026 04:12:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50127	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:05 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Thu, 25 Apr 2024 02:29:05 GMT ETag: 0x8DC64CF7A8E9A99 x-ms-request-id: c84341ff-301e-0069-43c2-9600cf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56963 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb85e99b4c01-MIA
2024-04-26 04:12:05 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50125	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	2421	OUT	GET /td/fls/rul/activityi;fledge=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 04:12:05 UTC	967	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM; expires=Sun, 26-Apr-2026 04:12:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50126	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1569	OUT	GET /ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://12345.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50131	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	722	OUT	GET /logos/aa498dad-1691-4c3b-894a-906c990be323/eab8b6ff-57d6-438a-a7e5-c58dd370ce73/000d8b20-8c3d-4f4f-a0da-5b515f8f20d2/Square_combinationmark_black.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:05 GMT Content-Type: image/png Content-Length: 31949 Connection: close Content-MD5: 6SIaNAIwJI1xTX1pg+csoQ== Last-Modified: Tue, 30 Mar 2021 18:43:19 GMT ETag: 0x8D8F3ABB01160DE x-ms-request-id: 12f2ad5d-c01e-0052-3eeb-7c456b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56943 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb866d8d226f-MIA
2024-04-26 04:12:05 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 0c 00 00 01 9e 08 06 00 00 00 10 75 93 99 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDRupHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: a3 83 fd 71 61 6e 76 ae 52 8e e7 cb 04 42 31 6e f7 e7 23 fe c7 85 7f fd 8e 29 d1 e2 34 b1 5c 2c 15 8a f1 58 89 b8 50 22 4d c7 79 b9 52 91 44 21 c9 95 e2 12 e9 7f 32 f1 1f 96 fd 09 93 77 0d 00 ac 86 4f c0 4e b6 07 b5 cb 6c c0 7e ee 01 02 8b 0e 58 d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 c0 3c 10 42 06 e4 80 1c 0a a1 18 96 41 19 54 c0 3a d8 04 b5 b0 03 1a a0 11 9a e1 10 b4 c1 31 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d Data Ascii: qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: e4 9a 54 96 74 63 ae e5 dc a2 b9 17 e6 e9 ce cb 9e 77 3c 59 35 59 90 7c 38 85 98 12 97 b2 3f e5 83 20 42 50 2f 18 4f e5 a7 6e 4d 1d 13 f2 84 9b 85 4f 45 be a2 8d a2 51 b1 b7 b8 4a 3c 92 e6 9d 56 95 f6 38 dd 3b 7d 43 fa 68 86 4f 46 75 c6 33 09 4f 52 2b 79 91 19 92 b9 23 f3 4d 56 44 d6 de ac cf d9 71 d9 2d 39 94 9c 94 9c a3 52 0d 69 96 b4 2b d7 30 b7 28 b7 4f 66 2b 2b 93 0d e4 79 e6 6d ca 1b 93 87 ca f7 e4 23 f9 73 f3 db 15 6c 85 4c d1 a3 b4 52 ae 50 0e 16 4c 2f a8 2b 78 5b 18 5b 78 b8 48 bd 48 5a d4 33 df 66 fe ea f9 23 0b 82 16 7c bd 90 b0 50 b8 b0 b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 Data Ascii: Ttcw<Y5Y\|8? BP/OnMOEQJ<V8;}ChOFu3OR+y#MVDq-9Ri+0(Of++ym#slLRPL/+x[[xHHZ3f#\|PxY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcad
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 35 2d 30 37 2d 31 30 Data Ascii: ap/1.0/sType/ResourceEvent#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2014 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2015-07-10
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c Data Ascii: story> <tiff:Orientation>1</tiff:Orientation> <tiff:XResolution>720000/10000</tiff:XResolution> <tiff:YResolution>720000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:ColorSpace>1<
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50129	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1407	OUT	GET /ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9628652.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50135	13.32.115.116	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	755	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
2024-04-26 04:12:05 UTC	509	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Date: Thu, 25 Apr 2024 04:18:29 GMT Last-Modified: Fri, 12 Apr 2024 16:30:41 GMT ETag: "2775054c068b37509e0798448f7fd32c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 3f72a8b28c744ea2f627e9f8a8ac8282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: 986cUl58v0gumiql6aqaKtA_OCd-DjWnaZmHKkSzikrwTDo5_78h8A== Age: 86016
2024-04-26 04:12:05 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50130	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	2233	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://9628652.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk9D9i-2ERsBLIZ2ICeEuCebC-Jqu0SLdYXVu1kpPBmQlM7E4cjptph7Rc0POo
2024-04-26 04:12:05 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2247068054722482789"}],"aggregatable_trigger_data":[{"filters":[{"14":["12867063"]}],"key_piece":"0xbf1cbafe44381379","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe1dd06ab03085d8f","not_filters":{"14":["12867063"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["12867063"]}],"key_piece":"0xe49fad3b08775540","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x77bf77df5630eae0","not_filters":{"14":["12867063"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3538193130736590743","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50128	142.250.217.230	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	2485	OUT	GET /activityi;dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: 9628652.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk9D9i-2ERsBLIZ2ICeEuCebC-Jqu0SLdYXVu1kpPBmQlM7E4cjptph7Rc0POo
2024-04-26 04:12:05 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Expires: Fri, 26 Apr 2024 04:12:05 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 04:12:05 UTC	592	IN	Data Raw: 35 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 6d 48 36 64 6d 42 33 34 55 44 46 64 Data Ascii: 59a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CImH6dmB34UDFd
2024-04-26 04:12:05 UTC	849	IN	Data Raw: 73 73 6f 25 32 36 77 65 65 62 6c 79 5f 73 73 6f 5f 65 6e 61 62 6c 65 64 25 33 44 74 72 75 65 3b 75 31 32 3d 75 73 3b 70 73 3d 31 3b 70 63 6f 72 3d 31 30 32 33 37 37 34 31 38 39 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 6f 30 76 39 31 38 33 31 32 34 39 35 38 7a 38 Data Ascii: sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8
2024-04-26 04:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50132	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-9517040-46&cid=171990837.1714104719&jid=1679937653&_u=YEBAAEAAAAAAACAAI~&z=677992896 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50136	104.19.177.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	605	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	830	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:05 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Wed, 24 Apr 2024 02:34:16 GMT ETag: 0x8DC64070978C968 x-ms-request-id: afd3a406-801e-006c-557a-96d214000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56970 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb874efaa55d-MIA
2024-04-26 04:12:05 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-26 04:12:05 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-26 04:12:05 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50137	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1511	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722646&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqor69BboVsny_K7DCDXcsyz4GImiUUgS97uFoHG_eJVrfLW4f&random=29142363&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50139	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1539	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722660&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdR-v88V_KqHuwxP0UiGzWSci1cvOLfugus7Xwy3acNM-1sXz&random=1902299953&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50138	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1503	OUT	GET /pagead/1p-user-list/746791505/?random=1714104722873&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlF2Df7J4mt7VJp6dvMAc88kLzlNfaLzqdLt3qSb8EMAknJ4m&random=3180817349&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50140	151.101.193.140	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1036	OUT	GET /ads/conversions-config/v1/pixel/config/t2_d07onas7e_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:05 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-26 04:12:05 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50143	18.173.166.21	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1139	OUT	GET /aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source;event-source Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 26 Apr 2024 04:12:05 GMT x-amzn-RequestId: f591e071-d22d-4e9a-b32b-e4ac78e6d8af Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 a9238331544e89348802c1b04e93cfcc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: omFMdiJPRNuYlo0n1Qp8zYJEwe3nsOHP-TnRL4mYX5UOHdloaoS3og==
2024-04-26 04:12:05 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50144	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 34 31 35 35 34 31 32 33 30 30 32 30 32 35 36 33 39 37 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://squareup.com","trigger_debug_key":"14155412300202563979"},"type":"trigger-no-matching-source"}]
2024-04-26 04:12:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 04:12:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50145	142.251.35.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1160	OUT	GET /ddm/fls/z/dc_pre=CLyD_tiB34UDFeE7RAgdsZMJgA;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50146	142.250.217.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1942	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUmr1FICvyJ4JojaglZQ3m8OHxzrjf6xzWMVtXIJxn9NtlCbdwlvGTMriibV
2024-04-26 04:12:06 UTC	2228	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2247068054722482789"}],"aggregatable_trigger_data":[{"filters":[{"14":["12867063"]}],"key_piece":"0xbf1cbafe44381379","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe1dd06ab03085d8f","not_filters":{"14":["12867063"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["12867063"]}],"key_piece":"0xe49fad3b08775540","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x77bf77df5630eae0","not_filters":{"14":["12867063"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"14155412300202563979","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50148	13.35.116.120	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1133	OUT	POST /api/v2/ip.json?referrer=null&page=https%3A%2F%2Fsquareup.com%2F&page_title=3rd%20Party%20iFrame HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:05 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 52 47 69 45 75 70 57 33 77 48 76 6f 6e 6b 6c 6b 6d 78 4c 77 30 4d 4a 79 68 31 54 56 32 58 4b 6c 51 45 6d 47 69 58 48 66 22 7d Data Ascii: {"src":"tag","auth":"RGiEupW3wHvonklkmxLw0MJyh1TV2XKlQEmGiXHf"}
2024-04-26 04:12:06 UTC	964	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 3387 Connection: close Date: Fri, 26 Apr 2024 04:12:05 GMT Server: nginx Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Thu, 25 Apr 2024 04:12:05 GMT Vary: Accept-Encoding, Origin Request-ID: a8955346-6b09-450a-b00c-cb409040906b X-Cache: Miss from cloudfront Via: 1.1 8b130a1488d53626d2fd075757d55034.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C2 X-Amz-Cf-Id: Ol9awdW4ahQmzNbLrAFE-7NRP7cUMtR9tQlZyzvQPWaVTJnfA91yAg==
2024-04-26 04:12:06 UTC	3387	IN	Data Raw: 7b 22 68 71 22 3a 7b 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 6f 6e 73 65 72 76 69 63 65 22 2c 22 64 65 6d 61 6e 64 62 61 73 65 5f 73 69 64 22 3a 32 37 33 34 30 32 30 36 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 43 6f 6e 73 65 72 76 69 63 65 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 42 75 73 69 6e 65 73 73 20 53 65 72 76 69 63 65 73 22 2c 22 73 75 62 5f 69 6e 64 75 73 74 72 79 22 3a 22 47 65 6e 65 72 61 6c 22 2c 22 65 6d 70 6c 6f 79 65 65 5f 63 6f 75 6e 74 22 3a 32 31 38 34 2c 22 70 72 69 6d 61 72 79 5f 73 69 63 22 3a 22 37 33 38 39 22 2c 22 70 72 69 6d 61 72 79 5f 6e 61 69 63 73 22 3a 6e 75 6c 6c 2c 22 73 74 72 65 65 74 5f 61 64 64 72 65 73 73 22 3a 22 35 39 35 20 53 20 38 30 20 45 20 53 74 65 20 33 30 30 22 2c 22 63 69 74 79 Data Ascii: {"hq":{"company_name":"Conservice","demandbase_sid":27340206,"marketing_alias":"Conservice","industry":"Business Services","sub_industry":"General","employee_count":2184,"primary_sic":"7389","primary_naics":null,"street_address":"595 S 80 E Ste 300","city

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50147	34.96.71.22	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	1114	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	511	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1d7ba62e-f45b-48b1-a4b3-b753132c722f; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1714104726\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Fri, 26 Apr 2024 04:12:06 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 32 39 39 31 35 39 32 36 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 31 64 37 62 61 36 32 65 2d 66 34 35 62 2d 34 38 62 31 2d 61 34 62 33 2d 62 37 35 33 31 33 32 63 37 32 32 66 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50141	52.21.40.167	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	2075	OUT	GET /_/ad/afac78d381b547529232acd8e168a635/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D HTTP/1.1 Host: q.quora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 04:12:06 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,9c71d9bce7c126dba7d86d51e77b6611,10.0.0.39,56308,102.129.152.220,,232648242994,1,1714104726.049,0.001,,.,0,0,0.000,0.000,-,0,0,203,196,98,10,34729,,,,,,-, Content-Length: 43 Connection: Close
2024-04-26 04:12:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50142	209.54.182.161	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:05 UTC	480	OUT	GET /iu3?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ; ad-privacy=0
2024-04-26 04:12:05 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 26 Apr 2024 04:12:05 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 3M6ZVXR3Q5AZY37APJTN Set-Cookie: ad-id=A39tNAlNgUPstgcQJInpbZQ; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 04:12:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 04:12:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-26 04:12:05 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50150	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	490	OUT	GET /logos/aa498dad-1691-4c3b-894a-906c990be323/eab8b6ff-57d6-438a-a7e5-c58dd370ce73/000d8b20-8c3d-4f4f-a0da-5b515f8f20d2/Square_combinationmark_black.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:06 GMT Content-Type: image/png Content-Length: 31949 Connection: close Content-MD5: 6SIaNAIwJI1xTX1pg+csoQ== Last-Modified: Tue, 30 Mar 2021 18:43:19 GMT ETag: 0x8D8F3ABB01160DE x-ms-request-id: 12f2ad5d-c01e-0052-3eeb-7c456b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56944 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb8b4954097d-MIA
2024-04-26 04:12:06 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 0c 00 00 01 9e 08 06 00 00 00 10 75 93 99 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 Data Ascii: PNGIHDRupHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: a3 83 fd 71 61 6e 76 ae 52 8e e7 cb 04 42 31 6e f7 e7 23 fe c7 85 7f fd 8e 29 d1 e2 34 b1 5c 2c 15 8a f1 58 89 b8 50 22 4d c7 79 b9 52 91 44 21 c9 95 e2 12 e9 7f 32 f1 1f 96 fd 09 93 77 0d 00 ac 86 4f c0 4e b6 07 b5 cb 6c c0 7e ee 01 02 8b 0e 58 d2 76 00 40 7e f3 2d 8c 1a 0b 91 00 10 67 34 32 79 f7 00 00 93 bf f9 8f 40 2b 01 00 cd 97 a4 e3 00 00 bc e8 18 5c a8 94 17 4c c6 08 00 00 44 a0 81 2a b0 41 07 0c c1 14 ac c0 0e 9c c1 1d bc c0 17 02 61 06 44 40 0c 24 c0 3c 10 42 06 e4 80 1c 0a a1 18 96 41 19 54 c0 3a d8 04 b5 b0 03 1a a0 11 9a e1 10 b4 c1 31 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d Data Ascii: qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: e4 9a 54 96 74 63 ae e5 dc a2 b9 17 e6 e9 ce cb 9e 77 3c 59 35 59 90 7c 38 85 98 12 97 b2 3f e5 83 20 42 50 2f 18 4f e5 a7 6e 4d 1d 13 f2 84 9b 85 4f 45 be a2 8d a2 51 b1 b7 b8 4a 3c 92 e6 9d 56 95 f6 38 dd 3b 7d 43 fa 68 86 4f 46 75 c6 33 09 4f 52 2b 79 91 19 92 b9 23 f3 4d 56 44 d6 de ac cf d9 71 d9 2d 39 94 9c 94 9c a3 52 0d 69 96 b4 2b d7 30 b7 28 b7 4f 66 2b 2b 93 0d e4 79 e6 6d ca 1b 93 87 ca f7 e4 23 f9 73 f3 db 15 6c 85 4c d1 a3 b4 52 ae 50 0e 16 4c 2f a8 2b 78 5b 18 5b 78 b8 48 bd 48 5a d4 33 df 66 fe ea f9 23 0b 82 16 7c bd 90 b0 50 b8 b0 b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 Data Ascii: Ttcw<Y5Y\|8? BP/OnMOEQJ<V8;}ChOFu3OR+y#MVDq-9Ri+0(Of++ym#slLRPL/+x[[xHHZ3f#\|PxY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcad
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 74 69 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 35 2d 30 37 2d 31 30 Data Ascii: ap/1.0/sType/ResourceEvent#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/"> <xmp:CreatorTool>Adobe Photoshop CC 2014 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2015-07-10
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 73 74 6f 72 79 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 31 3c 2f 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 37 32 30 30 30 30 2f 31 30 30 30 30 3c 2f 74 69 66 66 3a 59 52 65 73 6f 6c 75 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 32 3c 2f 74 69 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c Data Ascii: story> <tiff:Orientation>1</tiff:Orientation> <tiff:XResolution>720000/10000</tiff:XResolution> <tiff:YResolution>720000/10000</tiff:YResolution> <tiff:ResolutionUnit>2</tiff:ResolutionUnit> <exif:ColorSpace>1<
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50149	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1501	OUT	GET /pagead/1p-user-list/746791505/?random=1714104722850&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMsroGLBUrr_dYF6vBbQdP4TISI0b55MtzAFDFrME9HHtM84D&random=21040603&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50151	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1539	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722667&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcsW-HAj9e2jhPCNmFcGCDUJCbWNDCgDMdsSRmtkCzhq7W5Ed&random=2669008875&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50152	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1512	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722664&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2tZl14xvany1orOGKZozu01TEApEZBr9z31RcMZFyD-R4uZT&random=300974641&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50164	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1279	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722646&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqor69BboVsny_K7DCDXcsyz4GImiUUgS97uFoHG_eJVrfLW4f&random=29142363&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50173	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	2130	OUT	GET /activity;register_conversion=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:06 UTC	593	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50160	142.251.35.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1160	OUT	GET /ddm/fls/z/dc_pre=CNvQsNmB34UDFccrRAgdl9oO_g;src=9628652;type=globa0;cat=doubl0;match_id=undefined;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=/signup;u4=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;u14=https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ord=1;num=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50167	142.250.64.162	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1048	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:07 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50155	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1902	OUT	GET /pagead/viewthroughconversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC0R6TuMXFH6l0SG0PBHlUa1gdQt9bAlk-k&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:06 UTC	1830	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqnTai8cbbIGHn1RTzxrTaOIdqaeiLMrn2i65F7BQ1i9vx5hex&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2tvBydNcdy15ctYMSy5JKq9783bNd2a2g&random=2767239044 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50175	151.101.1.140	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	405	OUT	GET /ads/conversions-config/v1/pixel/config/t2_d07onas7e_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:06 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-26 04:12:06 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50161	142.251.35.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1324	OUT	GET /ddm/fls/z/dc_pre=CLSFqNmB34UDFQU3RAgdCtQH3g;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50166	142.250.217.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1944	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:06 UTC	2227	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2247068054722482789"}],"aggregatable_trigger_data":[{"filters":[{"14":["12867063"]}],"key_piece":"0xbf1cbafe44381379","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xe1dd06ab03085d8f","not_filters":{"14":["12867063"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["12867063"]}],"key_piece":"0xe49fad3b08775540","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x77bf77df5630eae0","not_filters":{"14":["12867063"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3538193130736590743","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"2247068054722482789","filters":[{"14":["12867063"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"2247068054722482789","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50157	142.250.64.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1886	OUT	GET /ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9628652.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50177	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	386	OUT	GET /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	331	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Function-Execution-Id: a2jnjkvc2gye X-Cloud-Trace-Context: a77fd8158bc6fc0ebc60009f79eaf4bf Date: Fri, 26 Apr 2024 04:12:06 GMT Server: Google Frontend Content-Length: 181 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	181	IN	Data Raw: 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3a 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 45 69 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 6f 76 65 72 6c 6f 61 64 65 64 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e Data Ascii: 500 Internal Server Error: The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50158	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	835	OUT	POST /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	832	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50176	18.173.166.39	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	436	OUT	GET /aat?pid=927300c8-b60e-4010-8a44-2bae91cd2246&event=PageView&ts=1714104722119 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	378	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 26 Apr 2024 04:12:06 GMT x-amzn-RequestId: 777d3225-4c2a-4640-95e2-e39d9051a709 X-Cache: Miss from cloudfront Via: 1.1 f204fd5edced5b62e46cf4708208b058.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: S7cKw3SLn4ePQlriN_W3CS3Tb7g0K8ZaWFIsNE4K3Z1oy6WlmHFkqA==
2024-04-26 04:12:06 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50179	18.64.174.9	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	962	OUT	GET /rules-p-e9KDqb0WIZVj6.js HTTP/1.1 Host: rules.quantcount.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	667	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11201 Connection: close Last-Modified: Thu, 06 Jul 2023 22:11:35 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin access-control-allow-origin: * access-control-allow-methods: GET Date: Fri, 26 Apr 2024 04:12:07 GMT Cache-Control: max-age=3600 ETag: "b84af32c3c94747ebb481d08a716cff7" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e3bcbfdec8b3ea5b49e81ec75e25afe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: gH8BjtCmEHmKL7XBBxWKwx4Ktu-UZhj_LHX80xHC90BCx2EkQ1YsFw==
2024-04-26 04:12:07 UTC	11201	IN	Data Raw: 2f 2a 0a 20 51 75 61 6e 74 63 61 73 74 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 74 61 67 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 38 2d 32 30 32 33 2c 20 51 75 61 6e 74 63 61 73 74 20 43 6f 72 70 2e 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6c 2c 6b 29 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3d 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 66 2e 68 72 65 66 3d 65 3b 72 65 74 75 72 6e 20 66 7d 2c 6e 3d 5b 2f 5e 68 74 74 70 5b 73 5d 3f 3a 5c 2f 5c 2f 28 28 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 2a 29 7c 28 5b 5e 5c 2f 5d 2a 66 6c 73 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 2e 6e 65 74 29 29 5c 2f 2e 2a 7e 6f 72 65 66 3d 28 3f 3c 75 72 6c Data Ascii: /* Quantcast measurement tag Copyright (c) 2008-2023, Quantcast Corp./'use strict';(function(a,l,k){var m=function(e){var f=k.createElement("a");f.href=e;return f},n=[/^http[s]?:\/\/((adservice.google.)\|([^\/]fls\.doubleclick\.net))\/.~oref=(?<url

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50165	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1307	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722660&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdR-v88V_KqHuwxP0UiGzWSci1cvOLfugus7Xwy3acNM-1sXz&random=1902299953&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50172	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 35 33 38 31 39 33 31 33 30 37 33 36 35 39 30 37 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://squareup.com","trigger_debug_key":"3538193130736590743"},"type":"trigger-no-matching-source"}]
2024-04-26 04:12:07 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 04:12:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50162	104.19.178.52	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	830	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:06 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Wed, 24 Apr 2024 02:34:16 GMT ETag: 0x8DC64070978C968 x-ms-request-id: afd3a406-801e-006c-557a-96d214000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56971 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a3bb8e1b6ca4c4-MIA
2024-04-26 04:12:06 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-26 04:12:06 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-26 04:12:06 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50163	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1271	OUT	GET /pagead/1p-user-list/746791505/?random=1714104722873&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlF2Df7J4mt7VJp6dvMAc88kLzlNfaLzqdLt3qSb8EMAknJ4m&random=3180817349&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50168	44.193.224.11	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1606	OUT	GET /kpi?c=square&tag_id=51&kpi=pageview&user_id=undefined&fpc=f4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU&gtmcb=1573584185 HTTP/1.1 Host: pixel.pointmediatracker.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	772	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: application/json Content-Length: 2 Connection: close x-amzn-RequestId: a2c1a065-1cb4-48b2-ac68-3ef104b4c6ae Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Set-Cookie: c=3685af4b-abdd-4196-9cff-6f09269e1343; domain=.pointmediatracker.com; expires=Sat, 26-Apr-2025 04:12:07 GMT; path=/; secure; SameSite=None x-amz-apigw-id: W0NvoG2CoAMEGnQ= Location: https://cnv.event.prod.bidr.io/log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685 X-Amzn-Trace-Id: Root=1-662b2996-7ff301651214b1cc2d32d5b0;Parent=30b65444622bf0a4;Sampled=0;lineage=07bbc27a:0
2024-04-26 04:12:07 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50170	52.4.157.85	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1104	OUT	GET /rs?id=9ba0d2d829a94f35b0e9e9c67ed6b26d&t=marketing&tx=undefined&sku=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&dpo=true HTTP/1.1 Host: tags.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	869	IN	HTTP/1.1 302 Access-Control-Allow-Headers: Content-Type,X-Forwarded-Proto Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Cache-Control: no-cache, must-revalidate Date: Fri, 26 Apr 2024 04:12:06 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://tags.w55c.net/rs?sccid=262b6016-3a78-724b-fa35-92c6f2253286&scc=1&id=9ba0d2d829a94f35b0e9e9c67ed6b26d&t=marketing&tx=undefined&sku=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&dpo=true Pragma: no-cache Server: Retargeting/v2.0.30-801-g0076fb7#rel-ec2-master i-0d4d7a41dcac0928c@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=4QSHbis61S0cWq2; Domain=.w55c.net; Expires=Mon, 26 May 2025 14:12:06 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50169	52.3.125.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1133	OUT	GET /pixel/?ad_log=referer&action=lead&content_id=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&receipt_id=undefined&pixid=0ba6452e-34bf-4a66-9ed7-f0e47bc6efcf HTTP/1.1 Host: arttrk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	83	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: Close
2024-04-26 04:12:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50156	68.67.179.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	809	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:06 UTC	1570	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 04:12:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f AN-X-Request-Uuid: 1a000702-3e72-41fa-99cc-670708370a5e Set-Cookie: XANDR_PANID=tvinWDcLL7EaF4oMBufrAJz3XvkgVvWTQy2rGfW48EosPI54K6LnxZAxuSlFNvmn7MVIoyGkmxRP_oYcCsZaDHB6O19_Hg1kJOBTvLdLv8o.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 04:12:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3353354537123624800; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50171	192.28.147.68	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	988	OUT	POST /webevents/visitWebPage?_mchNc=1714104720341&_mchCn=&_mchId=424-IAB-218&_mchTk=_mch-squareup.com-1714104720339-69522&_mchWs=j1RQ&_mchHo=squareup.com&_mchPo=&_mchRu=%2Fsignup&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp=app%3Dweebly__-__country_code%3Dus__-__return_to%3Dhttps%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup__-__v%3Dweebly-sso__-__weebly_sso_enabled%3Dtrue HTTP/1.1 Host: 424-iab-218.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 97c58682-90eb-4a0e-84c0-6d6ec443ffd0 Access-Control-Allow-Origin: *
2024-04-26 04:12:07 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50180	13.35.116.120	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	441	OUT	GET /api/v2/ip.json?referrer=null&page=https%3A%2F%2Fsquareup.com%2F&page_title=3rd%20Party%20iFrame HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	491	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Fri, 26 Apr 2024 04:12:07 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 653460d9-6e07-4d49-baff-5242cbc67cc1 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 6492b42e2fc3684cc00b54d685c2328c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C2 X-Amz-Cf-Id: ktBZ2srRNRoWzDxxABzUbXueJirOY3M0DGq4NOtg9gBraayPVQ9PMA==
2024-04-26 04:12:07 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50184	172.64.151.101	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	1200	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f&C=1 CF-Ray: 87a3bb90fb3a3352-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; Path=/; Domain=casalemedia.com; Expires=Sat, 26 Apr 2025 04:12:07 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2712; Path=/; Domain=casalemedia.com; Expires=Thu, 25 Jul 2024 04:12:07 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2712; Path=/; Domain=casalemedia.com; Expires=Thu, 25 Jul 2024 04:12:07 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Aj4R2wkON%2Fau3%2F3vDhxEV2MRyOkBt8BgRt6g4396YvLHj7ZZOWoZlFnvtq7ZGXBZGMf7P4AjaMH2vr7wKAmbbGT1HvYjHwrNdOCWm4wf0pdmktwfWGVBiF4YwhiqqdnX10%2F4KE7sdxVag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50181	13.32.87.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:06 UTC	1068	OUT	GET /bg9s?x-amz-cf-id=Ol9awdW4ahQmzNbLrAFE-7NRP7cUMtR9tQlZyzvQPWaVTJnfA91yAg==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	578	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Date: Thu, 25 Apr 2024 21:27:44 GMT Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 6bcc5cb16e0756268a257daab0f6082c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: xvu1r8cRblcV68ZHnyXSDHG0O2VPqgLH8Tpr_otQ80ZaT3ofipjY6Q== Age: 24264 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50188	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1307	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722667&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=a38ECOnO7gQQ79Kv1QM&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcsW-HAj9e2jhPCNmFcGCDUJCbWNDCgDMdsSRmtkCzhq7W5Ed&random=2669008875&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50190	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1269	OUT	GET /pagead/1p-user-list/746791505/?random=1714104722850&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqMsroGLBUrr_dYF6vBbQdP4TISI0b55MtzAFDFrME9HHtM84D&random=21040603&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50182	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1895	OUT	GET /pagead/viewthroughconversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2KVvNhOqnKjbXDo26MACl06dGiNlFc8eU&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:07 UTC	1823	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v&is_vtc=1&cid=CAQSKQB7FLtq5dJpAQlbeMY6o1GZKsmcOgOvVB9QtQO6R7G7s6ijL9vXsCDe&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC34fJ7d9hWwFO-dWS57LcqsEnN6RwgNJfI&random=2194597562 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50186	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	2569	OUT	POST /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:07 UTC	565	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 61 30 64 61 65 62 33 62 37 35 66 36 66 34 63 39 37 39 36 62 33 39 39 30 33 31 31 35 37 65 32 33 34 38 30 62 61 36 36 39 35 32 39 61 65 65 38 62 33 38 62 63 66 62 38 61 65 38 33 30 37 36 34 62 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 38 31 36 32 39 37 37 30 31 37 31 35 34 34 34 22 2c 22 66 62 2e 61 64 76 61 6e 63 65 64 Data Ascii: {"event_name":"PageView","fb.dynamic_product_ads":{"content_type":"product"},"custom_data":{"content_type":"product"},"event_id":"ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b","fb.pixel_id":"816297701715444","fb.advanced
2024-04-26 04:12:07 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Length: 0 Connection: close vary: origin access-control-allow-credentials: true access-control-allow-origin: https://squareup.com Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50189	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1280	OUT	GET /pagead/1p-user-list/984344943/?random=1714104722664&cv=11&fst=1714104000000&bg=ffffff&guid=ON&async=1&gtm=45be44o0v896628859z8850185931za201&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2tZl14xvany1orOGKZozu01TEApEZBr9z31RcMZFyD-R4uZT&random=300974641&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50183	52.200.166.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1421	OUT	GET /_/ad/afac78d381b547529232acd8e168a635/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D HTTP/1.1 Host: q.quora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	376	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 04:12:07 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Q-Stat: ,d21b6b43657ef7d7b624219c5f8cbff5,10.0.0.207,64758,102.129.152.220,,361297933802,1,1714104727.290,0.004,,.,0,0,0.000,0.004,-,0,0,203,126,63,10,26847,,,,,,-, Content-Length: 43 Connection: Close
2024-04-26 04:12:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50185	54.234.41.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	592	OUT	GET /sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	513	IN	HTTP/1.1 200 Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=f2e1131f799e4971ba327a396cf242d9; Domain=.tremorhub.com; Expires=Sat, 26-Apr-2025 10:00:27 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f; Domain=.tremorhub.com; Expires=Sun, 26-Apr-2026 15:48:47 GMT; Path=/; Secure; SameSite=None
2024-04-26 04:12:07 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50187	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	911	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=3827e974-0cdc-4a02-be04-dd7ce14d2e13&batch_time=1714104725687 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15365 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	15365	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 32 32 39 32 30 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":1,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104722920,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:07 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 3827e974-0cdc-4a02-be04-dd7ce14d2e13 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:07 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 33 38 32 37 65 39 37 34 2d 30 63 64 63 2d 34 61 30 32 2d 62 65 30 34 2d 64 64 37 63 65 31 34 64 32 65 31 33 22 7d Data Ascii: {"request_id":"3827e974-0cdc-4a02-be04-dd7ce14d2e13"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50191	142.250.217.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	891	OUT	GET /pagead/landing?gcs=G111&gcd=13n3n3n3n5&rnd=617780294.1714104721&url=https%3A%2F%2Fsquareup.com%2Fsignup&dma=0&npa=0&gtm=45He44o0n81PS2PXZDv850185931za200&auid=588246385.1714104721 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:07 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50193	52.4.157.85	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1189	OUT	GET /rs?sccid=262b6016-3a78-724b-fa35-92c6f2253286&scc=1&id=9ba0d2d829a94f35b0e9e9c67ed6b26d&t=marketing&tx=undefined&sku=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&dpo=true HTTP/1.1 Host: tags.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=4QSHbis61S0cWq2
2024-04-26 04:12:07 UTC	904	IN	HTTP/1.1 302 Access-Control-Allow-Headers: Content-Type,X-Forwarded-Proto Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Cache-Control: no-cache, must-revalidate Date: Fri, 26 Apr 2024 04:12:06 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=NFFTSGJpczYxUzBjV3Ey&google_cm&google_sc Pragma: no-cache Server: Retargeting/v2.0.30-801-g0076fb7#rel-ec2-master i-00af2083c286792aa@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=4QSHbis61S0cWq2; Domain=.w55c.net; Expires=Mon, 26 May 2025 14:12:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=2; Domain=.w55c.net; Expires=Sun, 26 May 2024 04:12:07 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50194	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1880	OUT	GET /pagead/1p-conversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqnTai8cbbIGHn1RTzxrTaOIdqaeiLMrn2i65F7BQ1i9vx5hex&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2tvBydNcdy15ctYMSy5JKq9783bNd2a2g&random=2767239044 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50195	68.67.179.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	811	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	1570	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f AN-X-Request-Uuid: d4acdddb-7ca9-4f8c-89f9-8811da2932c0 Set-Cookie: XANDR_PANID=V2LPUjWmm5E_4-n14U0gcyX-AzD1vNcrS4c8P4bp-lYbKvw8x5vJNqM_D4oTEWbeIoVsnKODN0NYI24gQoHxUyBvHLSB8r5r9VqMsgkbc5k.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 04:12:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3785399365866252566; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50196	68.67.179.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1034	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=tvinWDcLL7EaF4oMBufrAJz3XvkgVvWTQy2rGfW48EosPI54K6LnxZAxuSlFNvmn7MVIoyGkmxRP_oYcCsZaDHB6O19_Hg1kJOBTvLdLv8o.; receive-cookie-deprecation=1; uuid2=3353354537123624800
2024-04-26 04:12:07 UTC	1491	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3353354537123624800&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f AN-X-Request-Uuid: f5239ad6-6186-4ac9-b02d-02dc2d2e1d21 Set-Cookie: XANDR_PANID=tvinWDcLL7EaF4oMBufrAJz3XvkgVvWTQy2rGfW48EosPI54K6LnxZAxuSlFNvmn7MVIoyGkmxRP_oYcCsZaDHB6O19_Hg1kJOBTvLdLv8o.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 04:12:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3353354537123624800; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50198	142.251.35.226	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1639	OUT	GET /ddm/fls/z/dc_pre=CImH6dmB34UDFdIlRAgdGMEHDQ;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50200	142.250.217.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1403	OUT	GET /activity;register_conversion=1;src=12345;type=Monitor;cat=PageView;ord=7159635349607;npa=0;ps=1;pcor=704006597;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:07 UTC	593	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50201	142.250.64.162	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1050	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=YmRhZDg0ZDctMGM1NC00ZjExLTk4MjAtMTg3MTc2YWFhNDhm&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:07 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 Date: Fri, 26 Apr 2024 04:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:07 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50197	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	922	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
2024-04-26 04:12:07 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:07 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50204	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	959	OUT	GET /libtrc/unip/1543392/tfa.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	769	IN	HTTP/1.1 200 OK Connection: close Content-Length: 81941 x-amz-id-2: +xiVP/eOdY2cRbCZ56tyhFm/qE9oEEKTRLtdH0sSqybQCLyJi6u1ycWN6/iJxQkdHYApqh7V4Nk= x-amz-request-id: TS5F9KWYCH120E5H x-amz-replication-status: COMPLETED Last-Modified: Sun, 21 Apr 2024 11:03:07 GMT ETag: "a285db84c92e8c8a64d51ed4d5aa25de" x-amz-server-side-encryption: AES256 x-amz-version-id: f6Vqv6TsFmH2EoM81TrXFyXNg5i_I_DX Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Fri, 26 Apr 2024 04:12:07 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kpdk1780113-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714104728.770084,VS0,VE40 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 63 Access-Control-Allow-Origin: *
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 34 32 31 2d 34 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 Data Ascii: /! 20240421-4-RELEASE /function _typeof(e){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==S
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 72 5d 29 29 3b 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 66 6f 72 6d 61 74 42 65 61 63 6f 6e 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 22 22 2c 72 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 6e 2b 3d 69 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 69 5d 29 2b 22 26 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 42 6c 6f 62 28 5b 6e 2e 73 6c 69 63 65 28 30 2c 2d 31 29 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d Data Ascii: h(encodeURIComponent(r)+"="+encodeURIComponent(t[r]));return n.join("&")},formatBeaconParams:function e(t){var n="",r;for(var i in t)t.hasOwnProperty(i)&&(n+=i+"="+encodeURIComponent(t[i])+"&");return new Blob([n.slice(0,-1)],{type:"application/x-www-form
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 7c 7c 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 3d 6e 75 6c 6c 3b 76 61 72 20 65 3d 7b 7d 3b 65 5b 74 68 69 73 2e 67 72 6f 75 70 69 6e 67 4b 65 79 4e 61 6d 65 5d 3d 74 2c 69 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 64 65 74 61 69 6c 3a 65 2c 74 79 70 65 3a 22 64 74 22 7d 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 2c 6e 29 29 7d 3b 74 2e 4d 65 73 73 61 67 65 44 65 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 69 66 28 74 68 69 73 2e 67 72 6f 75 70 69 6e 67 4b 65 79 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 64 65 6c 61 79 65 64 45 76 65 6e 74 73 4d 61 70 Data Ascii: outHandles[r]\|\|(this.timeoutHandles[r]=setTimeout(function(){this.timeoutHandles[r]=null;var e={};e[this.groupingKeyName]=t,i.call(this,{detail:e,type:"dt"})}.bind(this),n))};t.MessageDelayer=function(e,n,o){if(this.groupingKeyName=e,this.delayedEventsMap
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 6c 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3d 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 7b 64 65 74 61 69 6c 3a 74 7c 7c 7b 7d 7d 29 29 7d 2c 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 73 61 66 65 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 73 61 66 65 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: ls.dispatchEvent=n.eventUtils.dispatchEvent\|\|function(e,t){"function"==typeof CustomEvent&&document.dispatchEvent(new CustomEvent(e,{detail:t\|\|{}}))},n.eventUtils.safeAddEventListener=n.eventUtils.safeAddEventListener\|\|function(e,t){document.addEventListe
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 27 54 46 41 53 43 27 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 74 66 61 3d 65 2e 5f 74 66 61 7c 7c 5b 5d 2c 65 2e 5f 74 66 61 2e 63 6f 6e 66 69 67 7c 7c 28 65 2e 5f 74 66 61 2e 54 66 61 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 4d 61 70 3d 7b 7d 7d 2c 65 2e 5f 74 66 61 2e 54 66 61 43 6f 6e 66 69 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 61 66 65 47 65 74 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 3b 69 66 28 72 26 26 74 68 69 73 2e 63 6f 6e 66 69 67 4d 61 70 5b 72 5d 29 69 3d 22 22 2b 72 3b 65 6c 73 65 7b 69 66 28 21 74 68 69 73 2e 66 69 72 73 74 50 75 62 6c 69 73 68 65 72 49 64 29 72 65 74 75 72 6e 20 6e 3b 69 3d 74 68 69 73 2e 66 69 72 73 74 50 75 62 Data Ascii: 'TFASC']),function(e,t){e._tfa=e._tfa\|\|[],e._tfa.config\|\|(e._tfa.TfaConfig=function(){this.configMap={}},e._tfa.TfaConfig.prototype={safeGet:function e(t,n,r){var i,o,a;if(r&&this.configMap[r])i=""+r;else{if(!this.firstPublisherId)return n;i=this.firstPub
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 28 22 7b 6a 73 53 63 6f 70 65 7d 22 29 3e 3d 30 3f 22 54 52 43 22 3a 27 54 46 41 53 43 27 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 5b 6e 2e 6a 73 53 63 6f 70 65 5d 2c 69 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 74 29 3b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 70 75 73 68 28 74 28 6e 5b 69 5d 2c 69 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 69 66 28 22 66 75 6e Data Ascii: ("{jsScope}")>=0?"TRC":'TFASC']),function(e,t,n){"use strict";var r=e[n.jsScope],i={map:function e(t,n){if("function"==typeof Array.prototype.map)return n.map(t);for(var r=[],i=0;i<n.length;i++)r.push(t(n[i],i,n));return r},forEach:function e(t,n){if("fun
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 62 6c 69 73 68 65 72 49 64 54 79 70 65 2e 49 44 5d 3d 22 69 64 22 2c 47 29 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 7b 7d 2c 74 3d 69 2e 6f 62 6a 4b 65 79 73 28 6e 2e 6e 65 74 77 6f 72 6b 4d 61 70 29 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6f 29 7b 76 61 72 20 61 3b 65 5b 22 22 2b 6e 2e 6e 65 74 77 6f 72 6b 4d 61 70 5b 74 5b 6f 5d 5d 5b 44 5b 72 2e 70 75 62 6c 69 73 68 65 72 49 64 54 79 70 65 2e 49 44 5d 5d 5d 3d 21 30 7d 72 65 74 75 72 6e 20 65 7d 28 29 2c 4e 3d 22 67 6b 22 2c 78 3d 22 64 6b 22 2c 4c 3d 22 54 52 4b 5f 52 45 4c 45 41 53 45 5f 44 45 4c 41 59 45 44 5f 52 45 51 55 45 53 54 53 5f 45 56 45 4e 54 22 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 4e 5d Data Ascii: blisherIdType.ID]="id",G),A=function(){for(var e={},t=i.objKeys(n.networkMap),o=0;o<t.length;++o){var a;e[""+n.networkMap[t[o]][D[r.publisherIdType.ID]]]=!0}return e}(),N="gk",x="dk",L="TRK_RELEASE_DELAYED_REQUESTS_EVENT",M=function(){var e={};return e[N]
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 5f 5f 74 63 66 61 70 69 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 5f 5f 74 63 66 61 70 69 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4c 69 73 74 65 6e 65 72 46 6f 72 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 5f 74 63 66 61 70 69 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 74 7c 7c 22 74 63 6c 6f 61 64 65 64 22 21 3d 3d 65 2e 65 76 65 6e 74 53 74 61 74 75 73 26 26 22 75 73 65 72 61 63 74 69 6f 6e 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 65 2e 65 76 65 6e 74 53 74 61 74 75 73 7c 7c 71 28 7b 74 63 53 74 72 69 6e 67 3a 65 2e 74 63 53 74 72 69 6e 67 2c 67 64 70 72 41 70 70 Data Ascii: eturn void 0!==e.__tcfapi&&"function"==typeof e.__tcfapi},i.prototype.addListenerForConsentChange=function(){e.__tcfapi("addEventListener",2,function(e,t){!t\|\|"tcloaded"!==e.eventStatus&&"useractioncomplete"!==e.eventStatus\|\|q({tcString:e.tcString,gdprApp
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 74 6f 74 79 70 65 2e 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 4f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 2e 69 73 56 69 73 69 62 6c 65 26 26 65 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 2e 69 73 56 69 73 69 62 6c 65 28 29 7d 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 3b 28 73 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 73 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 76 69 64 65 72 4e 61 6d 65 3d 22 55 73 65 72 63 65 6e 74 72 69 63 73 22 2c 73 2e 70 72 Data Ascii: totype.isCookieBannerOpen=function(){return void 0!==e.Didomi.notice&&void 0!==e.Didomi.notice.isVisible&&e.Didomi.notice.isVisible()};var s=function e(){};(s.prototype=Object.create(n.prototype)).constructor=s,s.prototype.providerName="Usercentrics",s.pr
2024-04-26 04:12:07 UTC	1378	IN	Data Raw: 79 70 65 6f 66 20 65 2e 5f 73 70 5f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 5f 73 70 5f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 43 6f 6e 73 65 6e 74 52 65 61 64 79 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 71 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 7b 74 63 53 74 72 69 6e 67 3a 6e 2c 63 6d 70 53 74 61 74 75 73 3a 30 7d 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 74 63 53 74 72 69 6e 67 3a 74 2c 63 6d 70 53 74 61 74 75 73 3a 30 7d 3a 6e 75 6c 6c 29 7d 29 3a 71 28 6e 75 6c 6c 29 7d 2c 7b 22 54 63 66 41 70 69 2c 56 32 22 3a 6e 65 77 20 69 2c 22 4f 6e 65 54 72 75 73 74 2c 56 31 22 3a 6e 65 77 20 6f 2c 22 44 69 64 6f 6d 69 2c 56 31 22 3a 6e 65 77 20 61 Data Ascii: ypeof e._sp_.addEventListener?window._sp_.addEventListener("onConsentReady",function(e,t,n){q("string"==typeof n?{tcString:n,cmpStatus:0}:"string"==typeof t?{tcString:t,cmpStatus:0}:null)}):q(null)},{"TcfApi,V2":new i,"OneTrust,V1":new o,"Didomi,V1":new a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50206	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1362	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=a&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1020 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryTF1UMX4J4BBOaoHc sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:07 UTC	1020	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 46 31 55 4d 58 34 4a 34 42 42 4f 61 6f 48 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 37 32 36 33 30 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 46 31 55 4d 58 34 4a 34 42 42 4f 61 6f 48 63 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundaryTF1UMX4J4BBOaoHcContent-Disposition: form-data; name="ts"1714104726303------WebKitFormBoundaryTF1UMX4J4BBOaoHcContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-04-26 04:12:07 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:07 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:07 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50202	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1042	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
2024-04-26 04:12:07 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIiKSYoKLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:07 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50205	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	551	OUT	OPTIONS /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,x-request-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	582	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50208	172.64.151.101	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	702	OUT	GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; CMPS=2712; CMPRO=2712
2024-04-26 04:12:07 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87a3bb954d3da66f-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; Path=/; Domain=casalemedia.com; Expires=Sat, 26 Apr 2025 04:12:07 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2712; Path=/; Domain=casalemedia.com; Expires=Thu, 25 Jul 2024 04:12:07 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MeA3Ynl0zJ9mcOAftFjxak48Qb%2FG7KPzsOb8pAdmfgRJWbhPGn4epKISEKfWmoQpb7j%2BxQuf8QNNT8auMH2QhP6TtX9W%2BcQNloKEdsgIWAHo9MdQIYuhwwHU4bkSBIp81M%2FiHFX6sY0UkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-26 04:12:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50203	44.208.37.64	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	479	OUT	GET /pixel/?ad_log=referer&action=lead&content_id=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&receipt_id=undefined&pixid=0ba6452e-34bf-4a66-9ed7-f0e47bc6efcf HTTP/1.1 Host: arttrk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:07 UTC	83	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: Close
2024-04-26 04:12:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50209	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	2445	OUT	GET /activity;register_conversion=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:08 UTC	2226	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7904285943150300961"}],"aggregatable_trigger_data":[{"filters":[{"14":["13842635"]}],"key_piece":"0xc6f0ed07f2b7c3e8","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xcce952bb19b9a3c7","not_filters":{"14":["13842635"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13842635"]}],"key_piece":"0x8ed5d639fec058a","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x71738b0f3f91b34f","not_filters":{"14":["13842635"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"7610237501040156211","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7904285943150300961","filters":[{"14":["13842635"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7904285943150300961","filters":[{"14":["13842635"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7904285943150300961","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7904285943150300961","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50211	104.244.42.195	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	2320	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	1051	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:12:07 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A171410472808939304; Max-Age=63072000; Expires=Sun, 26 Apr 2026 04:12:08 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171410472808939304; Max-Age=63072000; Expires=Sun, 26 Apr 2026 04:12:08 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_g/Gu1QpVB7eqVZ+dRH+pxQ=="; Max-Age=63072000; Expires=Sun, 26 Apr 2026 04:12:08 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171410472808939304; Max-Age=63072000; Expires=Sun, 26 Apr 2026 04:12:08 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 500a390c088dc196 strict-transport-security: max-age=631138519 x-response-time: 88 x-connection-hash: db59283e3ef5581ab18facc308f599dffea1e4e882ed1a11d54b66982f234993 connection: close
2024-04-26 04:12:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50210	104.244.42.133	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	2303	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	551	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:12:08 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=d2e31339-e1c8-4191-ae73-d23f07876d13; Max-Age=63072000; Expires=Sun, 26 Apr 2026 04:12:08 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 264ec575b8e2f4de strict-transport-security: max-age=0 x-response-time: 7 x-connection-hash: dd17386e976e73bd4ee70b10af40b89caa9f8812aee63fcd1bbcfb14bffa86dc connection: close
2024-04-26 04:12:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50213	13.32.87.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	437	OUT	GET /bg9s?x-amz-cf-id=Ol9awdW4ahQmzNbLrAFE-7NRP7cUMtR9tQlZyzvQPWaVTJnfA91yAg==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	560	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Date: Thu, 25 Apr 2024 21:27:44 GMT Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 X-Cache: Error from cloudfront Via: 1.1 2feed206ccd80c991a2378002008d9f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C1 X-Amz-Cf-Id: ej6KO_uvGPd8bwo-R4MJG7BVFKMaTS3S9_kPwPFzwPm1LzGDYjB2BA== Age: 24265 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50217	157.240.14.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1430	OUT	GET /signals/config/2179726272122089?v=2.9.154&r=stable&domain=squareup.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105%2C150%2C179%2C181%2C113%2C135%2C145%2C208%2C209%2C207%2C128%2C139%2C119%2C174%2C216%2C106%2C217%2C152%2C110%2C133%2C126%2C114 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	1673	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy-report-only: default-src data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.facebook.com/csp/reporting/?minimize=0;require-trusted-types-for 'script'; content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-26 04:12:08 UTC	1524	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-04-26 04:12:08 UTC	1500	IN	Data Raw: 29 2c 63 29 2c 63 2e 65 78 74 72 61 63 74 50 49 49 3d 47 2c 65 29 2c 6a 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 62 7d 28 62 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 75 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 28 46 28 62 29 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 61 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 67 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 61 29 7d 29 2c 6d 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: ),c),c.extractPII=G,e),j(c,d)}return b}(b);e.exports=new u(function(a,b){c.listenOnce(function(){var a=w(F(b));h.addEventListener?h.addEventListener("click",a,{capture:!0,once:!1,passive:!0}):g.attachEvent("onclick",a)}),m.listen(function(a,c,d){return G(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50212	142.250.64.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:07 UTC	1873	OUT	GET /pagead/1p-conversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v&is_vtc=1&cid=CAQSKQB7FLtq5dJpAQlbeMY6o1GZKsmcOgOvVB9QtQO6R7G7s6ijL9vXsCDe&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC34fJ7d9hWwFO-dWS57LcqsEnN6RwgNJfI&random=2194597562 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50226	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1256	OUT	GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:08 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50227	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1366	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:08 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:08 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:08 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:08 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50219	142.250.64.162	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1166	OUT	GET /pixel?google_nid=9675309&google_hm=NFFTSGJpczYxUzBjV3Ey&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:08 UTC	741	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://tags.w55c.net/match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1 Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 384 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:08 UTC	384	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 77 35 35 63 2e 6e 65 74 2f 6d 61 74 63 68 2d 72 65 73 75 6c 74 3f 69 64 3d 38 62 62 31 33 38 62 63 30 34 34 36 34 31 37 63 39 61 34 64 66 39 61 30 31 33 36 64 30 63 61 66 38 61 39 33 33 32 38 35 39 32 62 66 34 64 30 35 39 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://tags.w55c.net/match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50214	3.225.117.71	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	485	OUT	GET /sync?UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=f2e1131f799e4971ba327a396cf242d9; tv_UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f
2024-04-26 04:12:08 UTC	369	IN	HTTP/1.1 200 Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=1d7ba62e-f45b-48b1-a4b3-b753132c722f; Domain=.tremorhub.com; Expires=Sun, 26-Apr-2026 15:48:48 GMT; Path=/; Secure; SameSite=None
2024-04-26 04:12:08 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 04:12:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50225	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1648	OUT	GET /pagead/1p-conversion/630646945/?random=1451085403&cv=11&fst=1714104722909&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSixldmVudC1zb3VyY2UsIHRyaWdnZXIsIG5vdC1uYXZpZ2F0aW9uLXNvdXJjZWIECgICAw&pscrd=CP3g9ZfSuq2hWyITCIDbn9qB34UDFQasgwgdglABMzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLOhVodHRwczovL3NxdWFyZXVwLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqnTai8cbbIGHn1RTzxrTaOIdqaeiLMrn2i65F7BQ1i9vx5hex&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC2tvBydNcdy15ctYMSy5JKq9783bNd2a2g&random=2767239044 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50223	68.67.179.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1036	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3Dbdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; XANDR_PANID=V2LPUjWmm5E_4-n14U0gcyX-AzD1vNcrS4c8P4bp-lYbKvw8x5vJNqM_D4oTEWbeIoVsnKODN0NYI24gQoHxUyBvHLSB8r5r9VqMsgkbc5k.; uuid2=3785399365866252566
2024-04-26 04:12:08 UTC	1491	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3785399365866252566&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f AN-X-Request-Uuid: 71262f05-d68a-4b9a-ac38-6b55338cd168 Set-Cookie: XANDR_PANID=V2LPUjWmm5E_4-n14U0gcyX-AzD1vNcrS4c8P4bp-lYbKvw8x5vJNqM_D4oTEWbeIoVsnKODN0NYI24gQoHxUyBvHLSB8r5r9VqMsgkbc5k.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:08 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 04:12:08 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3785399365866252566; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 04:12:08 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50215	54.144.182.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1140	OUT	GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685 HTTP/1.1 Host: cnv.event.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	497	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 04:12:08 GMT location: https://cnv.event.prod.bidr.io/log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 26 Apr 2024 04:22:08 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50220	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:08 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50218	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	924	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSgDMgsI6svksrjs8jwQBUIPIg0IARIJCgV0aWVyMhABWgdsYjhiZWlnYAE.
2024-04-26 04:12:08 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:08 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50229	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=a&__rev=1013068429&__s=u812ao%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:08 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:08 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:08 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50224	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	997	OUT	GET /track/cmf/appnexus?ttd=1&anid=3353354537123624800&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
2024-04-26 04:12:08 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIxO7hhaLs8jwQBRIXCghhcHBuZXh1cxILCMz2qaii7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSACKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:08 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50221	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=8a0ad6f2-f6e2-4799-93e0-fcb83946912c&batch_time=1714104722158 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	16094	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 31 34 39 32 37 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104714927,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:08 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 8a0ad6f2-f6e2-4799-93e0-fcb83946912c cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:08 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 38 61 30 61 64 36 66 32 2d 66 36 65 32 2d 34 37 39 39 2d 39 33 65 30 2d 66 63 62 38 33 39 34 36 39 31 32 63 22 7d Data Ascii: {"request_id":"8a0ad6f2-f6e2-4799-93e0-fcb83946912c"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50232	13.226.52.56	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	550	OUT	GET /send-post-request.js HTTP/1.1 Host: martech-production-c.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	585	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 592 Connection: close Date: Fri, 26 Apr 2024 04:12:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 27 Jun 2023 23:54:42 GMT ETag: "8ee775801179e9b10599e53c07e9a0cf" x-amz-server-side-encryption: AES256 x-amz-version-id: 0zXqWkrShPZAMBLdrnMxOW0tgH.9rOvW Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: m9s7lNMmcehvHmQx3UEcEVb6SzUMui3cDUZH74J-gZUhtqneKj2AHg==
2024-04-26 04:12:08 UTC	592	IN	Data Raw: 2f 2f 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 2d 6e 65 78 74 2d 6c 69 6e 65 20 6e 6f 2d 75 6e 75 73 65 64 2d 76 61 72 73 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 50 6f 73 74 52 65 71 75 65 73 74 28 64 61 74 61 2c 20 65 6e 64 70 6f 69 6e 74 2c 20 62 65 61 72 65 72 54 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 78 68 72 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 73 74 72 69 6e 67 69 66 69 65 64 44 61 74 61 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 61 74 61 29 3b 0a 0a 20 20 20 20 78 68 72 2e 6f 70 65 6e 28 27 50 4f 53 54 27 2c 20 65 6e 64 70 6f 69 6e 74 29 3b 0a 20 20 20 20 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 27 43 6f 6e 74 65 6e 74 2d 54 Data Ascii: // eslint-disable-next-line no-unused-varsfunction sendPostRequest(data, endpoint, bearerToken) { const xhr = new XMLHttpRequest(); const stringifiedData = JSON.stringify(data); xhr.open('POST', endpoint); xhr.setRequestHeader('Content-T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50228	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1048	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f&google_gid=CAESEN-L0yMxrZgUDBZKDe1tf5w&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsIiKSYoKLs8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSABKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
2024-04-26 04:12:08 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI-o3Dp6Ls8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSACKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:08 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50230	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1419 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:SlkZ3DBYTzGCitRtin04aoeRTmcwAw86CBlhURNVpSI= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	1419	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:12:08 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:08 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50231	173.194.213.157	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	894	OUT	POST /g/collect?v=2&tid=G-65K13HQ4KD&cid=171990837.1714104719&gtm=45je44o0v897866609z8850185931za200&aip=1&dma=0&gcs=G111&gcd=13n3n3n3n5&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:08 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://squareup.com Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50233	146.75.124.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	953	OUT	GET /ct/lib/main.1b7f3d0e.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23080 ETag: "51780471bd680082c3977720b56df64f" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Fri, 26 Apr 2024 04:12:08 GMT
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 1f 8b 08 08 ed 27 28 66 00 03 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 48 77 33 a0 0f 5b 5b ac dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 2c 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 84 3e 6c a7 ba b1 97 d9 42 35 f3 69 c6 44 91 71 3b 39 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 e7 4d 9a 89 3c 7c d8 6e 5d 06 8f 86 f3 78 bd b6 f9 b0 6c 77 b9 5b 5f 67 04 6e d6 f4 c0 73 39 21 ba 75 9b 0d af 29 73 b3 e1 9c 26 f0 73 41 2b 64 02 5e 06 74 d9 30 c5 4b b2 d9 7c ba fc 83 cd c5 70 c1 96 09 67 9f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: '(fmain.1b7f3d0e.js\ob%8,Hw3[[ Pl:Py,7>;%4D?C`YHRn3pg>lB5iDq;9)^$:<]M<\|n]xlw[_gns9!u)s&sA+d^t0K\|pge^v{`fY\|f!b"d[zA<XWo/
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 3a d3 74 3c 63 dd 0e fc e9 94 e4 77 89 98 63 48 f2 30 8f 73 66 c5 f9 3c 49 ac 50 5e af 41 16 b9 5f de 40 d4 1a 67 f7 56 a8 e3 d5 a9 6c 95 fa 1c ea cb 41 79 dd 53 be 44 f7 fd 6a d7 78 54 d7 79 1e e8 b7 e6 f9 20 a8 29 f8 13 d8 4f d4 f4 d4 6d 49 26 78 5d 0e ba 62 7f d6 38 de bd 7b e7 ab e6 4b f8 31 19 57 4f fe 30 46 2d 23 e5 50 7a 80 16 54 9c da c0 37 8e d2 f3 73 7a c7 b2 1f 81 94 4d c0 ca c1 a6 a5 96 97 6a 9b 26 d9 07 26 0b 18 08 14 61 e3 52 f9 4e be d9 28 d5 e4 e4 1d 06 38 5a 6d 4a 17 61 c9 fe ac ee cf 36 1b 66 76 9c 19 d7 21 23 11 f5 76 5e 85 e9 42 5b 44 6d ae ae ea c7 b8 ae 82 0a f0 4d 72 51 ea a5 15 e5 d2 4a b6 21 f4 94 ca d8 Data Ascii: Tk7N0".SBVQGm:t<cwcH0sf<IP^A_@gVlAySDjxTy )OmI&x]b8{K1WO0F-#PzT7szMj&&aRN(8ZmJa6fv!#v^B[DmMrQJ!
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1b 2a 4f 40 57 ee b7 e1 97 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 e5 f3 e9 8f 5f 2f 7e 39 f9 9f 8b f7 bf 7f 3d fd 42 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fb 25 fe 53 75 c1 c4 05 b0 ec 26 4d d7 5f 92 7f 33 7a 0c 02 0e f7 ab d6 ed 4f 7b 12 d4 15 5b 57 85 44 fb 15 40 9d 9e 97 46 48 35 6e Data Ascii: Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~_/~9=BvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%Su&M_3zO{[WD@FH5n
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 57 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d f9 f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 6b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 c4 Data Ascii: 9~[<^;\EW\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 61 7b 55 de 8c 92 01 9b d5 b7 0e f2 6f c0 cc 02 3e 56 ff f1 8f ac 44 49 79 4e 2c 1d 60 de 8f 66 53 70 67 04 4f 80 f3 32 0f 9a 39 ec bc aa 16 a7 91 cf 46 f2 44 62 d7 57 c9 ea b8 98 ce be b7 91 69 fd ce 26 67 42 7f 5e 23 a7 57 65 77 99 cb 9c 14 e4 a4 fe bb 07 4d d9 c3 83 9e ed b2 b7 ff b9 7a f9 c7 1e da ff 26 06 7e a2 c5 b1 ba dd ac 77 93 f0 ff d8 bb d6 ae b6 91 26 fd 57 12 9f 84 57 1a c9 46 ad bb 00 0d 2f 01 42 48 b8 ad 81 64 26 84 70 14 23 40 09 48 8e 2d 93 30 d8 ff 7d 9f ea 6e 49 ed 0b 73 f9 b0 7b ce be 67 3f 24 48 7d ad ae ae ae 7a 5a dd 55 9e bf 75 ca 67 21 9d 29 67 32 45 1e c5 ad 0e d5 1f c2 d2 f5 35 00 04 ae c1 06 d5 05 10 e1 bc 33 e7 ea 9b 2d 3e cc ab 03 74 2c 88 bd b1 68 48 68 fa f9 94 0b 7f f6 c4 dd 96 c5 a7 84 dc 69 66 ce 39 8b 7f da e7 7e 59 bc Data Ascii: a{Uo>VDIyN,`fSpgO29FDbWi&gB^#WewMz&~w&WWF/BHd&p#@H-0}nIs{g?$H}zZUug!)g2E53->t,hHhif9~Y
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: c6 bb 7a 5e e2 29 1c 33 7f ec d8 3a 1e 37 6f 93 bb 7e 7a a9 8b 16 5e 2c 77 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 d2 dc 75 bd 4c 05 dd a3 41 fa 2c 2f f2 36 97 20 18 98 fa 8e 5b e7 53 be 0b de 0f 2e 29 c4 53 c1 57 93 2c 62 f2 0a 22 42 a3 88 44 26 7d d8 6e 92 7b da e2 cc 09 a9 a6 3f bb 4b cb 9b e2 92 22 96 69 b3 51 06 f5 47 e9 6a 97 f3 0b bb 95 3d 9f fe b8 a0 68 6f 8b 7c d7 30 be 2a d4 23 0f a7 95 92 73 ff 59 2a e2 80 34 d7 5d 04 7c 78 9c ac 0e 3a 7b bb c7 27 f1 e3 eb a3 8b bd c3 cd 8d bd 8b e3 93 c3 ee c6 ce f6 ca 23 c0 37 46 bb c2 2c cb 1c 0d b2 95 d6 55 ff 82 c2 5c dd 1e 83 f2 e4 3a 6d 4d cc ad ed ee ee 7b 6c 9d b7 8f 76 df cd 97 ef 67 79 1b 3c ca ee d3 cb 76 da cf be a1 c2 f1 66 77 e3 68 fb 82 7a dc 3e d8 ee 1e 2f ae 34 ec 0d 92 7e da 26 Data Ascii: z^)3:7o~z^,wJ,vG+$_5&huLA,/6 [S.)SW,b"BD&}n{?K"iQGj=ho\|0#sY4]\|x:{'#7F,U\:mM{lvgy<vfwhz>/4~&
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 70 1c 87 46 1a 07 3e 17 47 dd ed d7 bb bf 19 ad ed 9f e4 8e 0f 24 f7 af 97 c3 7f c9 95 9b 3c 7b 39 34 9f 7d 19 95 cf ae e8 08 99 67 b5 78 50 b5 9c f7 0d 4c 23 c4 6b 36 9e c0 7c a0 e2 3f 0f 40 97 56 c2 90 c5 45 e7 44 a3 c5 a8 af e6 55 78 b7 6a 46 f3 5a b3 53 19 4e c1 c9 42 f1 af e2 e3 b4 b8 b6 2e 63 25 8e ac be 98 93 e3 f1 48 a8 4a b2 b5 c3 e6 f1 aa 7a 5c 2f 57 28 c0 ab 8e 79 ba 49 6c cf 87 18 8a 4f 7a a4 eb c5 17 4f 11 79 80 93 85 45 f5 06 bc f9 93 25 5a d2 8f 43 14 1d ee cb 59 74 0e c8 e0 f3 98 47 54 fb eb e2 0a a5 f4 76 e5 df 1f 55 b7 6f ad b5 dc d2 e9 46 7e d5 c0 c1 82 06 88 0d 64 87 44 4c 84 1e 0f 2a 57 4f c0 7a 89 f5 56 57 ff b6 a8 ff 9b 8a 13 2a a4 2b 14 48 57 40 30 46 ea b7 f6 bc 8a e8 30 d2 18 e9 85 91 86 15 fe 10 9f 31 c6 7c c7 b3 5d 2b a4 23 b5 Data Ascii: pF>G$<{94}gxPL#k6\|?@VEDUxjFZSNB.c%HJz\/W(yIlOzOyE%ZCYtGTvUoF~dDLWOzVW+HW@0F01\|]+#
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: a6 95 46 ad c0 8e d0 43 5b cc 86 42 57 10 08 88 f4 60 3e c1 88 29 30 02 3e 44 28 42 b6 be c1 25 98 d3 08 36 db 21 b2 1a 88 12 f8 7e 40 1c f6 55 b0 02 34 0c cb ed 86 64 35 15 dc 02 ac 00 eb 85 f9 52 21 0c b2 5d 80 01 c0 0c 15 cd d8 ae 4f 18 80 0f a2 01 36 81 17 3a 80 23 a1 8a 71 98 8f 0a 41 e4 f8 0a da 61 0c 33 11 80 18 57 05 3e 1e 84 c5 a5 db 6a 53 18 c8 03 86 b0 20 99 9e 0a 87 88 ef 21 f5 e1 a8 c8 08 73 80 c6 02 cc 9d 0a 92 60 71 5d 9a 36 12 bd 06 2f 31 88 47 e0 45 90 2b 15 3a 61 a8 56 80 a9 9b 02 51 a0 c6 0a 7d 18 5b 6b 0a 4f 31 e2 06 4c bb 33 05 ad 3c 48 b4 87 d5 11 a8 28 8b 59 3e ba b6 68 a9 4e e1 2d b2 ea 04 ad 14 e8 c5 5c c7 c6 9a 05 11 2a 0a 63 ae 0f 54 c1 30 67 0a 20 0b 3d ac 9a 08 0c 55 a0 19 56 14 80 02 26 c2 56 50 1a a6 17 24 62 f5 78 0a 60 43 Data Ascii: FC[BW`>)0>D(B%6!~@U4d5R!]O6:#qAa3W>jS !s`q]6/1GE+:aVQ}[kO1L3<H(Y>hN-\*cT0g =UV&VP$bx`C
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 65 71 59 67 ff 2e b2 7f 37 46 55 36 f4 c7 7d 9d fd 5d 64 7f 37 92 2a 1b 2a e5 a1 ce fe 28 b2 3f 1a c3 2a 1b 5a e6 47 9d fd 41 64 7f 30 ae aa 6c 28 1e 92 9e bf d8 ff 67 72 ff 3f f5 91 ae ac c3 00 ce ec ab 49 b6 b3 d9 0b c1 29 34 54 7d 82 a4 49 fd 2c 59 4b bb 76 4d ea e9 8a 9f 61 9d f6 be 92 05 b1 f1 d7 a4 ea ae 58 c7 77 f6 9a 54 e2 15 c3 1c bb 4e fc 5e 89 03 a0 5d 9d f8 b1 92 07 d3 6d 3a fa 50 09 04 7d 57 a4 b0 44 ff ec 9b 40 73 06 ce 7f 8e 67 d1 bd 81 de e0 a1 5f 16 4b 4b e2 2f 9d 66 74 f9 3d a5 f7 74 94 3f 7c 2a 5d fc 64 b9 c8 e3 3f 10 35 df f0 dd 70 53 36 bd e0 ce 85 3c a1 ac ca cc 77 fb 54 8e e8 b8 ca d5 57 07 eb 5a 3a f7 73 22 fc 63 cc 9c 67 42 13 df 8e 7e f6 3d 9d f0 80 af 2a 9e 7c a2 56 7d 00 6a 8a 88 e1 cc 5f cd 0d 43 b7 e2 58 73 96 44 44 e9 c6 b9 Data Ascii: eqYg.7FU6}]d7*(?ZGAd0l(gr?I)4T}I,YKvMaXwTN^]m:P}WD@sg_KK/ft=t?\|]d?5pS6<wTWZ:s"cgB~=\|V}j_CXsDD
2024-04-26 04:12:08 UTC	1378	IN	Data Raw: 3d a6 73 b9 aa 0b 09 aa 68 47 60 9b 88 25 1c 78 e4 1b 95 4d d5 c2 12 08 74 e2 64 91 89 be 8c 55 c0 67 61 3c 1d 30 23 05 e7 10 c8 ac 96 18 47 79 12 3e d7 f2 15 89 65 3e f8 24 e2 36 aa 29 17 f5 fc b5 8f 1b ca a9 1e 12 06 11 c1 a3 bf 49 c8 a2 8c d1 fd 87 e7 be 5b c0 94 95 7a 8a f8 95 77 0e f8 02 f3 f6 2b 94 80 c5 fa d6 7f 3c f8 d3 f6 57 0f 77 ce 77 cf 1f 05 dd f3 bf fd d7 cd 6a fd df 83 9d ff ec 87 bb 5f ce a3 73 18 b4 9f fb e5 8b b7 83 d2 d7 54 da f5 77 bc 47 ec b3 ac 67 6f f7 bb d6 f9 ee ce b9 7b ee 9d 3f 1a 3c 7c f0 88 2d f2 f4 f3 dd 96 4c 18 e6 25 66 f4 25 3f bf e9 b9 4c a4 5f 41 f0 f1 e3 f0 7a 9e ad 16 f3 54 0c 17 19 9d da 30 e5 94 7f 84 b6 d2 c5 64 17 88 7e 17 8b e8 ad 5c 3c 9f 13 0c c5 50 e5 37 ca d8 03 f2 a1 71 c1 a1 6c 7b db 76 2b 23 fc 46 7d 26 b2 Data Ascii: =shG`%xMtdUga<0#Gy>e>$6)I[zw+<Wwwj_sTwGgo{?<\|-L%f%?L_AzT0d~\<P7ql{v+#F}&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50235	172.64.151.101	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	502	OUT	GET /rum?cm_dsp_id=18&expiry=1729915926&external_user_id=1d7ba62e-f45b-48b1-a4b3-b753132c722f&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; CMPS=2712; CMPRO=2712
2024-04-26 04:12:08 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87a3bb9a7e7a25ad-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zispl9HM5F4AAF-5ARlnAgAA; Path=/; Domain=casalemedia.com; Expires=Sat, 26 Apr 2025 04:12:08 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2712; Path=/; Domain=casalemedia.com; Expires=Thu, 25 Jul 2024 04:12:08 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D5cXgtDmYCWD0zTBYknc%2FmDdzC59w%2FuALCvDgJOFt5Cm77HMPEqAGKiov6offhaejdbj1pxizVcUIe6NdeDHtPB%2BvR%2FGs3W0rgrntjXZ9JnUHg6Mh8lv1Sl2qZNcPubaYtRK1JLwi7B70w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-26 04:12:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50234	192.178.50.78	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1515	OUT	POST /g/collect?v=2&tid=G-65K13HQ4KD&gtm=45je44o0v897866609z8850185931za200&_p=1714104716846&_gaz=1&gcs=G111&gcd=13n3n3n3n5&npa=0&dma=0&cid=171990837.1714104719&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1714104722&sct=1&seg=0&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&dt=Sign%20up%20for%20Square&en=page_view&_fv=1&_ss=1&ep.avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&up.screen_resolution=1280x1024&upn.page_depth=1&up.avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&up.country=us&tfd=14774 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://squareup.com Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50236	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	980	OUT	GET /topics_api HTTP/1.1 Host: psb.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	418	IN	HTTP/1.1 200 OK Connection: close Content-Length: 65 Server: Varnish Retry-After: 0 Content-Type: text/html; charset=utf-8 Cache-Control: private, max-age=2592000 Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:08 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130068-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714104729.833711,VS0,VE0
2024-04-26 04:12:08 UTC	65	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 20 3c 54 49 54 4c 45 3e 32 30 30 20 4f 4b 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 4f 4b 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>OK</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50239	104.244.42.197	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1703	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d2e31339-e1c8-4191-ae73-d23f07876d13
2024-04-26 04:12:09 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:12:08 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 9d5a731026d2206e strict-transport-security: max-age=0 x-response-time: 92 x-connection-hash: 2f5202084f19f6b02a9f8ad0d9b83f17400736ffc4fd572665942b0ef167c20a connection: close
2024-04-26 04:12:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50237	142.250.217.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1718	OUT	GET /activity;register_conversion=1;src=9628652;type=pt-6p0;cat=doubl0;ord=1;num=3707050855126;npa=0;u1=undefined;u2=f4d668d2-779c-4df7-a4fc-07c00f1a3ade;u3=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue;u12=us;ps=1;pcor=1023774189;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0v9183124958z8811760733za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUn6PHoJPrDt3h6l4Qd0pCeHS42bqUOMuERSerZ9qF6MpIBdvEdVyk42mV87ruM
2024-04-26 04:12:09 UTC	2226	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7904285943150300961"}],"aggregatable_trigger_data":[{"filters":[{"14":["13842635"]}],"key_piece":"0xc6f0ed07f2b7c3e8","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xcce952bb19b9a3c7","not_filters":{"14":["13842635"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["13842635"]}],"key_piece":"0x8ed5d639fec058a","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x71738b0f3f91b34f","not_filters":{"14":["13842635"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"7610237501040156211","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7904285943150300961","filters":[{"14":["13842635"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"7904285943150300961","filters":[{"14":["13842635"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"7904285943150300961","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"7904285943150300961","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["9628652"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 26-May-2024 04:12:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50240	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1037	OUT	GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:08 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50238	54.144.182.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1182	OUT	GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1 HTTP/1.1 Host: cnv.event.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-26 04:12:09 UTC	748	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Fri, 26 Apr 2024 04:12:09 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn set-cookie: bito=AAEiuE7MVlMACFblqXz3dA; Domain=bidr.io; expires=Mon, 26 May 2025 00:12:09 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 26 May 2025 00:12:09 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-26 04:12:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50242	104.244.42.131	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1840	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=fc6317ca-3232-42e5-91fb-4e359f392a29&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fb4dbb5c-5569-41ce-b41b-9181d8206c76&tw_document_href=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tw_document_referrer=https%3A%2F%2Fsquareup.com%2F&tw_iframe_status=1&txn_id=o85ej&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171410472808939304; guest_id_ads=v1%3A171410472808939304; personalization_id="v1_g/Gu1QpVB7eqVZ+dRH+pxQ=="; guest_id=v1%3A171410472808939304
2024-04-26 04:12:09 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 26 Apr 2024 04:12:08 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3511138e4b8bf8b1 strict-transport-security: max-age=631138519 x-response-time: 79 x-connection-hash: e8166375cc02faeb8e4b55484915419209c0bf7fac53b0fdcca0062c8a3987ee connection: close
2024-04-26 04:12:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50243	192.178.50.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1641	OUT	GET /pagead/1p-conversion/630646945/?random=181683377&cv=11&fst=1714104722926&bg=ffffff&guid=ON&async=1&gtm=45be44o0v9181653709z8850185931za201&gcs=G111&gcd=13n3n3n3n5&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&label=T4RGCIa9hdEBEKHR26wC&hn=www.googleadservices.com&frm=0&tiba=Sign%20up%20for%20Square&value=0&npa=0&pscdl=noapi&auid=588246385.1714104721&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=ads_data_redaction%3Dfalse&fmt=3&ct_cookie_present=false&sscte=1&crd=CLHBsQIIsMGxAgi5wbECCJjBsQIiAQE4AUABSidldmVudC1zb3VyY2UsIHRyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKiFotiCjIOxkgEiEwikj6bagd-FAxXDiYMIHYG3BeYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzoVaHR0cHM6Ly9zcXVhcmV1cC5jb20v&is_vtc=1&cid=CAQSKQB7FLtq5dJpAQlbeMY6o1GZKsmcOgOvVB9QtQO6R7G7s6ijL9vXsCDe&eitems=ChEI8P6nsQYQ--Pj4rmAoOmWARIdAH9BdC34fJ7d9hWwFO-dWS57LcqsEnN6RwgNJfI&random=2194597562 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 04:12:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50244	172.217.3.70	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:08 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 37 36 31 30 32 33 37 35 30 31 30 34 30 31 35 36 32 31 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://squareup.com","trigger_debug_key":"7610237501040156211"},"type":"trigger-no-matching-source"}]
2024-04-26 04:12:09 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 04:12:09 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50245	52.4.157.85	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:08 UTC	1191	OUT	GET /match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1 HTTP/1.1 Host: tags.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=4QSHbis61S0cWq2; matchgoogle=2
2024-04-26 04:12:09 UTC	571	IN	HTTP/1.1 200 Access-Control-Allow-Headers: Content-Type,X-Forwarded-Proto Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Cache-Control: no-cache, must-revalidate Content-Type: image/gif Date: Fri, 26 Apr 2024 04:12:08 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Server: Retargeting/v2.0.30-801-g0076fb7#rel-ec2-master i-0d4d7a41dcac0928c@us-east-1b@dxedge-app-us-east-1-prod-asg Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 42 Connection: Close
2024-04-26 04:12:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50247	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:09 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50246	3.33.220.150	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	999	OUT	GET /track/cmf/appnexus?ttd=1&anid=3785399365866252566&ttd_tdid=bdad84d7-0c54-4f11-9820-187176aaa48f HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; TDCPM=CAESFQoGZ29vZ2xlEgsI-o3Dp6Ls8jwQBRIXCghhcHBuZXh1cxILCJSN4oWi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSACKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..
2024-04-26 04:12:09 UTC	556	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=bdad84d7-0c54-4f11-9820-187176aaa48f; expires=Sat, 26 Apr 2025 04:12:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI-o3Dp6Ls8jwQBRIXCghhcHBuZXh1cxILCKKn4LCi7PI8EAUSFgoHcnViaWNvbhILCJap4oWi7PI8EAUYBSADKAMyCwjqy-SyuOzyPBAFQg8iDQgBEgkKBXRpZXIyEAFaB2xiOGJlaWdgAQ..; expires=Sat, 26 Apr 2025 04:12:09 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 04:12:09 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50249	54.148.46.119	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	614	OUT	POST /v2/c HTTP/1.1 Host: api.neuro-id.com Connection: keep-alive Content-Length: 1698 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	1698	OUT	Data Raw: 6b 65 79 3d 6b 65 79 5f 6c 69 76 65 5f 4a 78 72 46 4b 43 71 7a 59 64 64 47 75 36 69 4f 65 6f 72 39 73 45 49 36 26 69 64 3d 64 32 37 66 36 37 32 30 39 30 31 33 26 73 65 73 73 69 6f 6e 49 64 3d 62 30 32 31 62 30 32 65 2d 65 66 61 34 2d 34 37 64 39 2d 39 33 38 63 2d 32 30 37 61 61 37 32 33 66 33 64 37 26 63 6c 69 65 6e 74 49 64 3d 36 34 32 37 31 35 30 37 2d 64 66 65 31 2d 34 30 65 36 2d 38 35 30 36 2d 35 66 32 36 34 31 62 66 39 30 32 31 26 75 73 65 72 49 64 3d 6e 75 6c 6c 26 70 61 67 65 49 64 3d 64 32 37 66 36 36 35 65 36 38 30 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 73 69 67 6e 75 70 26 6a 73 56 65 72 73 69 6f 6e 3d 33 2e 32 2e 30 26 65 76 65 6e 74 73 3d 57 31 73 79 4d 44 41 73 49 69 4e 76 64 Data Ascii: key=key_live_JxrFKCqzYddGu6iOeor9sEI6&id=d27f67209013&sessionId=b021b02e-efa4-47d9-938c-207aa723f3d7&clientId=64271507-dfe1-40e6-8506-5f2641bf9021&userId=null&pageId=d27f665e6801&url=https%3A%2F%2Fsquareup.com%2Fsignup&jsVersion=3.2.0&events=W1syMDAsIiNvd
2024-04-26 04:12:09 UTC	248	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 04:12:09 GMT Connection: close X-Request-Id: req_1s0CwTJ6zpMhEVvm Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://squareup.com Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50250	151.101.193.140	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	1565	OUT	GET /rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:09 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-26 04:12:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50248	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=a5e3779a-1e0c-4738-b84b-9d46a3200594&batch_time=1714104723740 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	15107	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 31 39 34 35 34 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":1,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104719454,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:09 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: a5e3779a-1e0c-4738-b84b-9d46a3200594 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:09 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 61 35 65 33 37 37 39 61 2d 31 65 30 63 2d 34 37 33 38 2d 62 38 34 62 2d 39 64 34 36 61 33 32 30 30 35 39 34 22 7d Data Ascii: {"request_id":"a5e3779a-1e0c-4738-b84b-9d46a3200594"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50257	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	1074	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104725364&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_a0daeb3b75f6f4c9796b399031157e23480ba669529aee8b38bcfb8ae830764b&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:09 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:09 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:09 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50258	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:09 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50253	192.178.50.78	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	1401	OUT	POST /g/collect?v=2&tid=G-65K13HQ4KD&gtm=45je44o0v897866609za200&_p=1714104716846&gcs=G111&gcd=13n3n3n3n5&npa=0&dma=0&cid=171990837.1714104719&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1714104722&sct=1&seg=0&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&dt=Sign%20up%20for%20Square&en=scroll&ep.avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade&epn.percent_scrolled=90&tfd=19792 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://squareup.com Date: Fri, 26 Apr 2024 04:12:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50259	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	1120	OUT	GET /user/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714104727884&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UVTFOemd6WXpVdE4yRTRNeTAwTkdVM0xUbGpaREl0WldZNE16Tm1Zak16T1dJeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://tealium-f.squarecdn.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1193648333442936 Date: Fri, 26 Apr 2024 04:12:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:09 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50262	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	1097	OUT	GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104727887&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVl6a3dPV0l3T0RrdE1EVXpNaTAwTW1JekxXRXpOVFF0TWpVeU56WXhOREE1TldZdw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://tealium-f.squarecdn.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1642610972026707 Date: Fri, 26 Apr 2024 04:12:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:09 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50255	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2569	OUT	POST /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive Content-Length: 568 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:09 UTC	568	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 56 69 65 77 43 6f 6e 74 65 6e 74 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 65 65 31 33 33 63 39 65 62 61 35 35 35 37 32 30 64 39 38 38 63 66 33 36 63 39 37 31 34 39 38 63 61 63 34 37 31 34 36 36 38 32 62 38 33 64 31 36 38 63 61 35 34 62 65 32 61 37 35 36 61 61 62 33 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 38 31 36 32 39 37 37 30 31 37 31 35 34 34 34 22 2c 22 66 62 2e 61 64 76 61 6e Data Ascii: {"event_name":"ViewContent","fb.dynamic_product_ads":{"content_type":"product"},"custom_data":{"content_type":"product"},"event_id":"ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3","fb.pixel_id":"816297701715444","fb.advan
2024-04-26 04:12:09 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Length: 0 Connection: close vary: origin access-control-allow-credentials: true access-control-allow-origin: https://squareup.com Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50254	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2569	OUT	POST /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:09 UTC	565	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 50 61 67 65 56 69 65 77 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 35 33 31 38 35 33 39 34 64 62 37 35 36 33 64 34 62 63 34 62 37 61 31 64 33 37 63 64 39 33 32 31 66 36 37 37 62 39 35 36 62 32 34 66 62 66 32 36 64 36 32 36 65 31 30 63 64 33 33 61 37 66 35 65 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 38 31 36 32 39 37 37 30 31 37 31 35 34 34 34 22 2c 22 66 62 2e 61 64 76 61 6e 63 65 64 Data Ascii: {"event_name":"PageView","fb.dynamic_product_ads":{"content_type":"product"},"custom_data":{"content_type":"product"},"event_id":"ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e","fb.pixel_id":"816297701715444","fb.advanced
2024-04-26 04:12:09 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Length: 0 Connection: close vary: origin access-control-allow-credentials: true access-control-allow-origin: https://squareup.com Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50256	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2569	OUT	POST /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive Content-Length: 568 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:09 UTC	568	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 22 56 69 65 77 43 6f 6e 74 65 6e 74 22 2c 22 66 62 2e 64 79 6e 61 6d 69 63 5f 70 72 6f 64 75 63 74 5f 61 64 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 22 7d 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 62 33 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 31 65 30 64 33 62 38 66 66 39 62 30 66 36 38 37 63 66 39 33 38 33 30 66 63 33 32 33 33 33 64 39 33 63 36 38 63 64 32 38 36 36 35 66 31 66 62 65 39 35 35 65 62 64 30 36 38 32 63 62 36 36 38 66 22 2c 22 66 62 2e 70 69 78 65 6c 5f 69 64 22 3a 22 38 31 36 32 39 37 37 30 31 37 31 35 34 34 34 22 2c 22 66 62 2e 61 64 76 61 6e Data Ascii: {"event_name":"ViewContent","fb.dynamic_product_ads":{"content_type":"product"},"custom_data":{"content_type":"product"},"event_id":"ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f","fb.pixel_id":"816297701715444","fb.advan
2024-04-26 04:12:09 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Length: 0 Connection: close vary: origin access-control-allow-credentials: true access-control-allow-origin: https://squareup.com Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50261	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2788	OUT	GET /v3/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727888 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://tealium-f.squarecdn.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 7 referrer-policy: origin x-pinterest-rid: 9975867628874844 Date: Fri, 26 Apr 2024 04:12:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50260	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2788	OUT	GET /v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727889 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://tealium-f.squarecdn.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 7 referrer-policy: origin x-pinterest-rid: 1646280403225182 Date: Fri, 26 Apr 2024 04:12:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50263	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	349	OUT	GET /topics_api HTTP/1.1 Host: psb.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	418	IN	HTTP/1.1 200 OK Connection: close Content-Length: 65 Server: Varnish Retry-After: 0 Content-Type: text/html; charset=utf-8 Cache-Control: private, max-age=2592000 Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:09 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kpdk1780067-PDK X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714104730.732625,VS0,VE0
2024-04-26 04:12:09 UTC	65	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 20 3c 54 49 54 4c 45 3e 32 30 30 20 4f 4b 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 4f 4b 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>OK</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50251	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=9c423126-7b21-4e22-a332-7d477cecbe97&batch_time=1714104723984 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15637 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	15637	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 32 32 38 36 36 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104722866,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:09 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 9c423126-7b21-4e22-a332-7d477cecbe97 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:09 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 39 63 34 32 33 31 32 36 2d 37 62 32 31 2d 34 65 32 32 2d 61 33 33 32 2d 37 64 34 37 37 63 65 63 62 65 39 37 22 7d Data Ascii: {"request_id":"9c423126-7b21-4e22-a332-7d477cecbe97"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50266	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	555	OUT	OPTIONS /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: * Access-Control-Max-Age: 3600 Content-Type: text/html; charset=utf-8 Function-Execution-Id: 8ysd51qdyjtp X-Cloud-Trace-Context: 87bb17c4c5b3364f1fe0082f50e7f82a Date: Fri, 26 Apr 2024 04:12:09 GMT Server: Google Frontend Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50252	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=246a5610-90fd-4502-8285-03f423214321&batch_time=1714104724811 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	15159	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 31 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 32 32 36 36 31 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":1,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104722661,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:09 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:09 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 246a5610-90fd-4502-8285-03f423214321 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:09 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 32 34 36 61 35 36 31 30 2d 39 30 66 64 2d 34 35 30 32 2d 38 32 38 35 2d 30 33 66 34 32 33 32 31 34 33 32 31 22 7d Data Ascii: {"request_id":"246a5610-90fd-4502-8285-03f423214321"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50265	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	555	OUT	OPTIONS /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:09 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Access-Control-Allow-Methods: * Access-Control-Allow-Headers: * Access-Control-Max-Age: 3600 Content-Type: text/html; charset=utf-8 Function-Execution-Id: sp1u96snjohz X-Cloud-Trace-Context: 2737446c8f2f40b6258f10a3b5c5113c Date: Fri, 26 Apr 2024 04:12:09 GMT Server: Google Frontend Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50268	54.144.182.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	551	OUT	GET /log/cnv?tag_id=51&buzz_key=blisspoint&value=square&segment_key=&order=e79c3fc3-3c74-4ece-9958-4126be29a00c.undefined&ord=5168758993684189685&_bee_ppp=1 HTTP/1.1 Host: cnv.event.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAEiuE7MVlMACFblqXz3dA; bitoIsSecure=ok
2024-04-26 04:12:10 UTC	512	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Fri, 26 Apr 2024 04:12:09 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn set-cookie: bito=AAEiuE7MVlMACFblqXz3dA; Domain=bidr.io; expires=Mon, 26 May 2025 00:12:09 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-26 04:12:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50270	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:09 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:10 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:10 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50269	52.205.65.239	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	537	OUT	GET /match-result?id=8bb138bc0446417c9a4df9a0136d0caf8a93328592bf4d059bfc856c256fbc33&ei=GOOGLE&euid=&google_gid=CAESELrv5rAePN36lcpMnb9RSN0&google_cver=1 HTTP/1.1 Host: tags.w55c.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=4QSHbis61S0cWq2; matchgoogle=2
2024-04-26 04:12:10 UTC	571	IN	HTTP/1.1 200 Access-Control-Allow-Headers: Content-Type,X-Forwarded-Proto Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Cache-Control: no-cache, must-revalidate Content-Type: image/gif Date: Fri, 26 Apr 2024 04:12:10 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Server: Retargeting/v2.0.30-801-g0076fb7#rel-ec2-master i-0e2d0f3a7e153dbdf@us-east-1b@dxedge-app-us-east-1-prod-asg Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 42 Connection: Close
2024-04-26 04:12:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 01 44 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50271	151.101.65.140	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	911	OUT	GET /rp.gif?ts=1714104724224&id=t2_d07onas7e&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=81686924-2f23-4e9f-8564-7c15c4a182fc&aaid=0000000000000000000000000000000000000000000000000000000000000001&em=0000000000000000000000000000000000000000000000000000000000000001&external_id=0000000000000000000000000000000000000000000000000000000000000001&idfa=0000000000000000000000000000000000000000000000000000000000000001&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:10 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-26 04:12:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50272	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1104	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1784675511058623 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50275	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2982	OUT	GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104728869&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UVTFOemd6WXpVdE4yRTRNeTAwTkdVM0xUbGpaREl0WldZNE16Tm1Zak16T1dJeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-26 04:12:10 UTC	984	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://tealium-f.squarecdn.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:10 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSYzVFJ4TWxOcWtWam1pK3QyNGlzSnVzQWhzVThJbnlWdE9hdVFmT2MxeVpNZ3JyYW1obWZSdmpVWnFWeElFMTJuczJ2NTVkWncxZnJEdmh3aEFXRUViV0E0b2wxZjl6V0xkVjZaamNGL3duYz0mT2JHcWIrM1MxbnNHU2FyQUJ1djlCejZkdi84PQ=="; Expires=Sat, 26 Apr 2025 04:12:10 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 9 referrer-policy: origin x-pinterest-rid: 1057702381568193 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50276	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	489	OUT	GET /user/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714104727884&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1tRm1PV0ppWmpFdE5tSmlaQzAwTldWa0xUbG1PV1l0WkRsbU1EUTRNREUxTkdaaA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 2420013097652460 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50278	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2177	OUT	GET /v3/?tid=2613167479450&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727889 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-26 04:12:10 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:10 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 8 referrer-policy: origin x-pinterest-rid: 4960376180656184 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50277	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	486	OUT	GET /user/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104727887&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-26 04:12:10 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVlUVmlPRGN4TVRFdFl6Rm1OeTAwWWprMExUbGpZMkV0TVRSak1HSm1ZemhrTW1RMQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 9858253418601198 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	321	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 62 6c 65 64 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":true,"aemPhEnabled":true,"aemGeEnabled":true,"aemDbEnabled":true,"aemLocEnabled":true,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pEnabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50282	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1148	OUT	GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:10 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50279	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2177	OUT	GET /v3/?tid=2614150882120&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714104727888 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-26 04:12:10 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:10 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 7 referrer-policy: origin x-pinterest-rid: 5336296297383590 Date: Fri, 26 Apr 2024 04:12:10 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50281	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1258	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:10 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:10 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:10 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:10 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50283	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1259	OUT	GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:10 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50286	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1369	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:10 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:10 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:10 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:10 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50288	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	3759	OUT	GET /1543392/trc/3/json?tim=1714104727172&data=%7B%22id%22%3A579%2C%22ii%22%3A%22%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1714104727158%2C%22cv%22%3A%2220240421-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquareup-sccnx%3Aabp%3D1%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22item-url%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22tim%22%3A1714104727170%2C%22ref%22%3Anull%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	1373	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/javascript; charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:10 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:10 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Set-Cookie: receive-cookie-deprecation=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:10 GMT;Secure;HttpOnly;SameSite=None;Partitioned Set-Cookie: taboola_session_id=v2_b609f5ea18e8cea33474ac7683626e0c_9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a_1714104730_1714104730_CNawjgYQ4JleGPbs6cTxMSABKAEw4QE4kaQOQPG-Dkivy9kDUJAEWABgAGiQgI6I5eeGxhBwAQ;Version=1;Path=/squareup-sccnx/;Domain=.taboola.com;Secure;SameSite=None cpu: 0.23025 X-Fastly-to-NLB-rtt: 23233 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:10 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-pdk-kfty2130071-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714104731.530742,VS0,VE36
2024-04-26 04:12:10 UTC	72	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 76 63 6c 2d 74 69 6d 65 2d 6d 73 3a 20 33 36 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: Vary: Accept-EncodingX-vcl-time-ms: 36transfer-encoding: chunked
2024-04-26 04:12:10 UTC	5	IN	Data Raw: 61 63 62 0d 0a Data Ascii: acb
2024-04-26 04:12:10 UTC	1378	IN	Data Raw: 54 46 41 53 43 2e 74 72 6b 43 61 6c 6c 62 61 63 6b 28 7b 22 74 72 63 22 3a 7b 22 73 69 22 3a 22 62 36 30 39 66 35 65 61 31 38 65 38 63 65 61 33 33 34 37 34 61 63 37 36 38 33 36 32 36 65 30 63 22 2c 22 73 64 22 3a 22 76 32 5f 62 36 30 39 66 35 65 61 31 38 65 38 63 65 61 33 33 34 37 34 61 63 37 36 38 33 36 32 36 65 30 63 5f 39 61 31 64 66 62 37 32 2d 33 63 66 66 2d 34 61 34 37 2d 39 62 63 64 2d 66 33 65 65 33 30 36 38 39 61 31 36 2d 74 75 63 74 64 32 34 61 66 31 61 5f 31 37 31 34 31 30 34 37 33 30 5f 31 37 31 34 31 30 34 37 33 30 5f 43 4e 61 77 6a 67 59 51 34 4a 6c 65 47 50 62 73 36 63 54 78 4d 53 41 42 4b 41 45 77 34 51 45 34 6b 61 51 4f 51 50 47 2d 44 6b 69 76 79 39 6b 44 55 4a 41 45 57 41 42 67 41 47 69 51 67 49 36 49 35 65 65 47 78 68 42 77 41 51 22 2c Data Ascii: TFASC.trkCallback({"trc":{"si":"b609f5ea18e8cea33474ac7683626e0c","sd":"v2_b609f5ea18e8cea33474ac7683626e0c_9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a_1714104730_1714104730_CNawjgYQ4JleGPbs6cTxMSABKAEw4QE4kaQOQPG-Dkivy9kDUJAEWABgAGiQgI6I5eeGxhBwAQ",
2024-04-26 04:12:10 UTC	1378	IN	Data Raw: 6e 75 74 65 73 20 61 67 6f 22 2c 22 6e 6f 77 22 3a 22 4e 6f 77 22 2c 22 74 6f 64 61 79 22 3a 22 54 6f 64 61 79 22 2c 22 64 61 79 73 22 3a 22 7b 30 7d 20 64 61 79 73 20 61 67 6f 22 7d 2c 22 65 78 70 6c 6f 72 65 2d 6d 6f 72 65 22 3a 7b 22 50 4f 50 55 50 5f 54 45 58 54 22 3a 22 4d 6f 72 65 20 73 74 6f 72 69 65 73 20 74 6f 20 63 68 65 63 6b 20 6f 75 74 20 62 65 66 6f 72 65 20 79 6f 75 20 67 6f 22 2c 22 54 49 54 4c 45 5f 54 45 58 54 22 3a 22 4b 65 65 70 20 6f 6e 20 72 65 61 64 69 6e 67 22 7d 2c 22 61 64 63 68 6f 69 63 65 22 3a 7b 22 61 64 43 68 6f 69 63 65 42 74 6e 2e 74 69 74 6c 65 22 3a 22 57 68 79 20 64 6f 20 49 20 73 65 65 20 74 68 69 73 20 69 74 65 6d 3f 22 7d 2c 22 75 73 65 72 78 22 3a 7b 22 70 6f 70 6f 76 65 72 2e 63 6f 6e 74 65 6e 74 2e 71 75 65 73 74 Data Ascii: nutes ago","now":"Now","today":"Today","days":"{0} days ago"},"explore-more":{"POPUP_TEXT":"More stories to check out before you go","TITLE_TEXT":"Keep on reading"},"adchoice":{"adChoiceBtn.title":"Why do I see this item?"},"userx":{"popover.content.quest
2024-04-26 04:12:10 UTC	7	IN	Data Raw: 6a 73 22 5d 7d 7d 29 Data Ascii: js"]}})
2024-04-26 04:12:10 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50280	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	726	OUT	POST /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Content-Length: 600 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer h9NabsHpt@Pg!yuUtRn6ja.TGMQXx@BAXjAhhM6i9yPzKQKJKMw2sbtEEAsqMry User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	600	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 6f 6e 69 74 6f 72 20 2d 20 41 6c 6c 20 45 76 65 6e 74 73 20 54 61 67 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 30 34 37 32 30 2e 39 33 33 7d 2c 7b 22 74 61 67 4e 61 6d 65 22 3a 22 44 6f 75 62 6c 65 43 6c 69 63 6b 20 2d 20 47 6c 6f 62 61 6c 20 2d 20 41 6c 6c 20 42 72 61 6e 64 73 20 50 61 67 65 20 56 69 65 77 20 41 6c 6c 20 2d 20 31 32 38 36 37 30 36 33 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 30 34 37 32 30 2e 39 33 33 7d 5d 2c 22 62 71 54 61 62 6c 65 22 3a 22 72 61 77 5f 64 61 74 61 22 2c 22 62 71 Data Ascii: {"data":[{"tagName":"Google Tag Monitor - All Events Tag","status":"success","tagTimestamp":1714104720.933},{"tagName":"DoubleClick - Global - All Brands Page View All - 12867063","status":"success","tagTimestamp":1714104720.933}],"bqTable":"raw_data","bq
2024-04-26 04:12:11 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Function-Execution-Id: ufwoivfxlwcj X-Cloud-Trace-Context: bdd7c77f3cb1f88aa13b3a2cb6e410b7 Date: Fri, 26 Apr 2024 04:12:11 GMT Server: Google Frontend Content-Length: 233 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:11 UTC	233	IN	Data Raw: 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 6f 6e 69 74 6f 72 20 2d 20 41 6c 6c 20 45 76 65 6e 74 73 20 54 61 67 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 73 75 63 63 65 73 73 22 2c 20 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 20 31 37 31 34 31 30 34 37 32 30 2e 39 33 33 7d 2c 20 7b 22 74 61 67 4e 61 6d 65 22 3a 20 22 44 6f 75 62 6c 65 43 6c 69 63 6b 20 2d 20 47 6c 6f 62 61 6c 20 2d 20 41 6c 6c 20 42 72 61 6e 64 73 20 50 61 67 65 20 56 69 65 77 20 41 6c 6c 20 2d 20 31 32 38 36 37 30 36 33 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 73 75 63 63 65 73 73 22 2c 20 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 20 31 37 31 34 31 30 34 37 32 30 2e 39 33 33 7d 5d Data Ascii: [{"tagName": "Google Tag Monitor - All Events Tag", "status": "success", "tagTimestamp": 1714104720.933}, {"tagName": "DoubleClick - Global - All Brands Page View All - 12867063", "status": "success", "tagTimestamp": 1714104720.933}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50285	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	726	OUT	POST /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive Content-Length: 600 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer h9NabsHpt@Pg!yuUtRn6ja.TGMQXx@BAXjAhhM6i9yPzKQKJKMw2sbtEEAsqMry User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	600	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 6f 6e 69 74 6f 72 20 2d 20 41 6c 6c 20 45 76 65 6e 74 73 20 54 61 67 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 30 34 37 32 30 2e 38 32 38 7d 2c 7b 22 74 61 67 4e 61 6d 65 22 3a 22 44 6f 75 62 6c 65 43 6c 69 63 6b 20 2d 20 47 6c 6f 62 61 6c 20 2d 20 41 6c 6c 20 42 72 61 6e 64 73 20 50 61 67 65 20 56 69 65 77 20 41 6c 6c 20 2d 20 31 32 38 36 37 30 36 33 22 2c 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 30 34 37 32 30 2e 38 32 38 7d 5d 2c 22 62 71 54 61 62 6c 65 22 3a 22 72 61 77 5f 64 61 74 61 22 2c 22 62 71 Data Ascii: {"data":[{"tagName":"Google Tag Monitor - All Events Tag","status":"success","tagTimestamp":1714104720.828},{"tagName":"DoubleClick - Global - All Brands Page View All - 12867063","status":"success","tagTimestamp":1714104720.828}],"bqTable":"raw_data","bq
2024-04-26 04:12:11 UTC	344	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Function-Execution-Id: om0jpnj8kbns X-Cloud-Trace-Context: 22a866a94e5cc9a8e88cbb5d388653d2 Date: Fri, 26 Apr 2024 04:12:11 GMT Server: Google Frontend Content-Length: 233 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:11 UTC	233	IN	Data Raw: 5b 7b 22 74 61 67 4e 61 6d 65 22 3a 20 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 6f 6e 69 74 6f 72 20 2d 20 41 6c 6c 20 45 76 65 6e 74 73 20 54 61 67 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 73 75 63 63 65 73 73 22 2c 20 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 20 31 37 31 34 31 30 34 37 32 30 2e 38 32 38 7d 2c 20 7b 22 74 61 67 4e 61 6d 65 22 3a 20 22 44 6f 75 62 6c 65 43 6c 69 63 6b 20 2d 20 47 6c 6f 62 61 6c 20 2d 20 41 6c 6c 20 42 72 61 6e 64 73 20 50 61 67 65 20 56 69 65 77 20 41 6c 6c 20 2d 20 31 32 38 36 37 30 36 33 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 73 75 63 63 65 73 73 22 2c 20 22 74 61 67 54 69 6d 65 73 74 61 6d 70 22 3a 20 31 37 31 34 31 30 34 37 32 30 2e 38 32 38 7d 5d Data Ascii: [{"tagName": "Google Tag Monitor - All Events Tag", "status": "success", "tagTimestamp": 1714104720.828}, {"tagName": "DoubleClick - Global - All Brands Page View All - 12867063", "status": "success", "tagTimestamp": 1714104720.828}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50284	35.244.154.8	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1000	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	664	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCJrTrLEGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=wpwJZQS8Ay7KBqaQmhYyx4naJ/fdnL8tVigXB3pZZ5Y=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 04:12:10 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 04:12:10 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 04:12:10 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50287	192.184.68.215	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2364	OUT	GET /pixel;r=1141592506;event=refresh;labels=_fp.event.Signup%20Page;source=gtm;rf=0;a=p-e9KDqb0WIZVj6;url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D;ref=https%3A%2F%2Fsquareup.com%2F;uht=2;fpan=1;fpa=P0-874124799-1714104721699;pbc=;ns=1;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;d=tealium-f.squarecdn.com;dst=1;et=1714104726103;tzo=-120;ogl=;ses=ed25adab-da7d-47b1-8a18-03121b9b6bf6;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: mc=662b299a-c4b48-18b59-7267a; expires=Tue, 27-May-2025 04:12:10 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-04-26 04:12:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50290	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1355	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=b&__rev=1013068429&__s=%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 995 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBpa4kpkAFwe0Mq2O sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/pages/Brisbane-Pain-Rehabilitation-Service-BPRS/208251232667235?fref=ts Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:10 UTC	995	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 70 61 34 6b 70 6b 41 46 77 65 30 4d 71 32 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 34 31 30 34 37 32 39 32 39 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 70 61 34 6b 70 6b 41 46 77 65 30 4d 71 32 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 75 90 5d Data Ascii: ------WebKitFormBoundaryBpa4kpkAFwe0Mq2OContent-Disposition: form-data; name="ts"1714104729297------WebKitFormBoundaryBpa4kpkAFwe0Mq2OContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxu]
2024-04-26 04:12:10 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:10 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:10 UTC	1829	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50289	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2117	OUT	OPTIONS /1543392/log/3/unip?en=page_view&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tim=1714104727170&ref=null&cv=20240421-4-RELEASE&tos=2138&ssd=1&scd=0&ler=other&mrir=to&vi=1714104727158&psb=true HTTP/1.1 Host: trc.taboola.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://tealium-f.squarecdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:10 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Server: nginx Allow: GET, HEAD, POST, TRACE, OPTIONS P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: attribution-reporting-eligible X-Fastly-to-NLB-rtt: 28320 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:10 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-gnv1820020-GNV X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714104731.807796,VS0,VE30 X-vcl-time-ms: 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50293	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2564	OUT	GET /v3/?event=pagevisit&ed=%7B%22event_id%22%3A%22eventId0001%22%7D&tid=2613167479450&cb=1714104728869&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UVTFOemd6WXpVdE4yRTRNeTAwTkdVM0xUbGpaREl0WldZNE16Tm1Zak16T1dJeA%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D%22%2C%22ref%22%3A%22https%3A%2F%2Fsquareup.com%2F%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSYzVFJ4TWxOcWtWam1pK3QyNGlzSnVzQWhzVThJbnlWdE9hdVFmT2MxeVpNZ3JyYW1obWZSdmpVWnFWeElFMTJuczJ2NTVkWncxZnJEdmh3aEFXRUViV0E0b2wxZjl6V0xkVjZaamNGL3duYz0mT2JHcWIrM1MxbnNHU2FyQUJ1djlCejZkdi84PQ=="
2024-04-26 04:12:11 UTC	914	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 26 Apr 2025 04:12:11 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ3UnZpRVZtM2tKRnoxWE40UmRVYnVTRk50QjN5dVBya1dKZEt0T1phMkZGa2lOdWY4WTRtQ1RFNFdFZ2xyZnAyWkxyQ1ZrZVRSOGV3dW52Nm9uVVQ2UnZ6bmVUbEQ2cWFBK2dGMFdpVXJwVT0memFnNU5Pc1pvQmdSWG43am9XOE5IRk9OUHcwPQ=="; Expires=Sat, 26 Apr 2025 04:12:11 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 7 referrer-policy: origin x-pinterest-rid: 4986723816603220 Date: Fri, 26 Apr 2024 04:12:11 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-26 04:12:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50294	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	929	OUT	GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50295	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1040	OUT	GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50296	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1256	OUT	GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50297	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	966	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728029&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50292	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:11 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:11 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50298	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1348	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50299	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:10 UTC	1077	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728031&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_ee133c9eba555720d988cf36c971498cac47146682b83d168ca54be2a756aab3&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50291	141.226.224.48	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	2180	OUT	OPTIONS /1543392/log/3/unip?en=pre_d_eng_tb&tos=2142&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1714104729305&mrir=to&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1 Host: trc-events.taboola.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://tealium-f.squarecdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:11 UTC	445	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:12:11 GMT Content-Length: 0 Connection: close Allow: GET, HEAD, POST, TRACE, OPTIONS P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: attribution-reporting-eligible

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50300	35.244.154.8	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1106	OUT	GET /1000.gif?memo=CI6tHBoNCJrTrLEGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=wpwJZQS8Ay7KBqaQmhYyx4naJ/fdnL8tVigXB3pZZ5Y=; pxrc=CAA=
2024-04-26 04:12:11 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=an703EQLTk7KBqaQmhYyx4naJ/fdnL8tVigXB3pZZ5Y=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 04:12:11 GMT; Secure; SameSite=None Set-Cookie: pxrc=CJvTrLEGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 04:12:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 04:12:11 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50301	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	723	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19839.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7362023595995249316&__req=b&__rev=1013068429&__s=%3Ar3hb51%3Akukrs3&__spin_b=trunk&__spin_r=1013068429&__spin_t=1714104692&__user=0&dpr=1&jazoest=2890&lsd=AVpUXB-b1oU&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50302	151.101.193.44	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	2337	OUT	GET /1543392/log/3/unip?en=page_view&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&tim=1714104727170&ref=null&cv=20240421-4-RELEASE&tos=2138&ssd=1&scd=0&ler=other&mrir=to&vi=1714104727158&psb=true HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: trigger sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
2024-04-26 04:12:11 UTC	1238	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: image/gif P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Set-Cookie: receive-cookie-deprecation=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Secure;HttpOnly;SameSite=None;Partitioned Cache-Control: no-cache Pragma: no-cache Attribution-Reporting-Register-Trigger: {"event_trigger_data":[{"trigger_data":"940086"}]} X-Fastly-to-NLB-rtt: 22892 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 04:12:11 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-pdk-kfty2130093-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714104731.477658,VS0,VE25 X-vcl-time-ms: 25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50306	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1148	OUT	GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50307	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1037	OUT	GET /tr/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=148, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50308	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1240	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50309	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1074	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728033&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_53185394db7563d4bc4b7a1d37cd9321f677b956b24fbf26d626e10cd33a7f5e&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50312	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1259	OUT	GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50313	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1374	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:11 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:11 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:11 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-26 04:12:11 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50305	192.184.68.166	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1749	OUT	GET /pixel;r=1141592506;event=refresh;labels=_fp.event.Signup%20Page;source=gtm;rf=0;a=p-e9KDqb0WIZVj6;url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D;ref=https%3A%2F%2Fsquareup.com%2F;uht=2;fpan=1;fpa=P0-874124799-1714104721699;pbc=;ns=1;ce=1;qjs=1;qv=b70d35e8-20231208114759;cm=;gdpr=0;d=tealium-f.squarecdn.com;dst=1;et=1714104726103;tzo=-120;ogl=;ses=ed25adab-da7d-47b1-8a18-03121b9b6bf6;mdl= HTTP/1.1 Host: pixel.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=662b299a-c4b48-18b59-7267a
2024-04-26 04:12:11 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-26 04:12:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50314	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	386	OUT	GET /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:12 UTC	331	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Function-Execution-Id: ebhc0tyd6uv9 X-Cloud-Trace-Context: 1c06e896be9078693349a90f86ef12fb Date: Fri, 26 Apr 2024 04:12:11 GMT Server: Google Frontend Content-Length: 181 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:12 UTC	181	IN	Data Raw: 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3a 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 45 69 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 6f 76 65 72 6c 6f 61 64 65 64 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e Data Ascii: 500 Internal Server Error: The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50315	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:12 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:12 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50310	141.226.224.48	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	2400	OUT	GET /1543392/log/3/unip?en=pre_d_eng_tb&tos=2142&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=1500&msa=0&rv=1&tim=1714104729305&mrir=to&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1 Host: trc-events.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: trigger sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
2024-04-26 04:12:11 UTC	926	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 04:12:11 GMT Content-Type: image/gif Connection: close P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Set-Cookie: receive-cookie-deprecation=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:11 GMT;Secure;HttpOnly;SameSite=None;Partitioned Cache-Control: no-cache Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50311	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=33389da5-3af9-40d3-981f-bbbcca05f1ee&batch_time=1714104728025 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:11 UTC	15158	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 32 34 31 33 39 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104724139,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:12 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:12 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 33389da5-3af9-40d3-981f-bbbcca05f1ee cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:12 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 33 33 33 38 39 64 61 35 2d 33 61 66 39 2d 34 30 64 33 2d 39 38 31 66 2d 62 62 62 63 63 61 30 35 66 31 65 65 22 7d Data Ascii: {"request_id":"33389da5-3af9-40d3-981f-bbbcca05f1ee"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50316	3.233.153.139	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	914	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.1.0%2Cenv%3Aproduction%2Cservice%3Aonboard-frontend%2Cversion%3A1.0.0&dd-api-key=pub5e3235aeff080c5034e98c4bf4d47d05&dd-evp-origin-version=4.1.0&dd-evp-origin=browser&dd-request-id=7e2f7c8b-e77c-4c6a-ac42-0b01a8ef2ca5&batch_time=1714104730260 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15643 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:11 UTC	15643	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 32 7d 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 66 32 62 61 36 38 62 2d 38 38 36 33 2d 34 36 62 63 2d 62 62 31 38 2d 64 63 36 34 36 33 65 62 65 63 61 35 22 7d 2c 22 64 61 74 65 22 3a 31 37 31 34 31 30 34 37 32 35 33 36 37 2c 22 73 65 72 76 69 63 65 22 3a 22 6f 6e 62 6f 61 72 64 2d 66 72 6f 6e 74 65 6e 64 22 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 65 32 36 37 32 64 36 63 2d 66 39 66 33 2d 34 36 33 36 2d 61 37 38 38 2d 37 65 34 37 36 32 35 65 64 62 37 63 22 2c 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 68 61 73 5f 72 65 70 6c 61 79 22 3a 74 72 75 65 Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":2}},"application":{"id":"ff2ba68b-8863-46bc-bb18-dc6463ebeca5"},"date":1714104725367,"service":"onboard-frontend","session":{"id":"e2672d6c-f9f3-4636-a788-7e47625edb7c","type":"user","has_replay":true
2024-04-26 04:12:12 UTC	430	IN	HTTP/1.1 202 Accepted Date: Fri, 26 Apr 2024 04:12:12 GMT Content-Type: application/json Content-Length: 53 Connection: close dd-request-id: 7e2f7c8b-e77c-4c6a-ac42-0b01a8ef2ca5 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload
2024-04-26 04:12:12 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 37 65 32 66 37 63 38 62 2d 65 37 37 63 2d 34 63 36 61 2d 61 63 34 32 2d 30 62 30 31 61 38 65 66 32 63 61 35 22 7d Data Ascii: {"request_id":"7e2f7c8b-e77c-4c6a-ac42-0b01a8ef2ca5"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50317	13.35.116.77	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:11 UTC	1172	OUT	GET /log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo HTTP/1.1 Host: segments.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1d7ba62e-f45b-48b1-a4b3-b753132c722f; tuuid_lu=1714104726\|ix:0\|mctv:0\|rp:0
2024-04-26 04:12:12 UTC	316	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Fri, 26 Apr 2024 04:12:12 GMT X-Cache: Miss from cloudfront Via: 1.1 9116843e269dabf0500134fa62bba0b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C2 X-Amz-Cf-Id: uBJi2mPHz8W5HQSbHaFijHJ1f41FL5sMiCS8J0hWpZtBYWtKBmsP6w==
2024-04-26 04:12:12 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50318	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	929	OUT	GET /tr/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:12 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50319	151.101.0.84	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	1192	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; _pinterest_ct_ua="TWc9PSZ3UnZpRVZtM2tKRnoxWE40UmRVYnVTRk50QjN5dVBya1dKZEt0T1phMkZGa2lOdWY4WTRtQ1RFNFdFZ2xyZnAyWkxyQ1ZrZVRSOGV3dW52Nm9uVVQ2UnZ6bmVUbEQ2cWFBK2dGMFdpVXJwVT0memFnNU5Pc1pvQmdSWG43am9XOE5IRk9OUHcwPQ=="
2024-04-26 04:12:12 UTC	367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4102 ETag: "1ca8eacc4de983d84e1ddd81fa5b6635" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 5847 Date: Fri, 26 Apr 2024 04:12:12 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-26 04:12:12 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-26 04:12:12 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-26 04:12:12 UTC	1346	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50321	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	966	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=2179726272122089&ev=PageView&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728035&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1714104725363.1002127388&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:12 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:12 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:12 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50322	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	1040	OUT	GET /tr/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:12 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=147, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 26 Apr 2024 04:12:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50323	157.240.14.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	1077	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=816297701715444&ev=ViewContent&dl=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&rl=&if=false&ts=1714104728038&cd[content_type]=product&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=3&o=4124&fbp=fb.1.1714104725363.1002127388&eid=ob3_plugin-set_1e0d3b8ff9b0f687cf93830fc32333d93c68cd28665f1fbe955ebd0682cb668f&ler=empty&cdl=API_unavailable&it=1714104722822&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=dCkrZmfEO7wCe7gasx04rfhT; fr=0uxbTTgPte8iy6c88..BmKyl5..AAA.0.0.BmKymE.AWXeEuNETg0
2024-04-26 04:12:12 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-26 04:12:12 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-26 04:12:12 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50325	162.159.136.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	3135	OUT	GET /favicon.ico HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fsso_intent%3Dsignup&v=weebly-sso&weebly_sso_enabled=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:12 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:12 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 6518 Connection: close CF-Ray: 87a3bbb1fb7a2876-MIA CF-Cache-Status: BYPASS Accept-Ranges: bytes Cache-Control: no-store Last-Modified: Fri, 19 Apr 2024 18:31:36 GMT Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /favicon.ico x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:12:12 UTC	532	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 00 00 00 c8 00 00 00 d2 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 d2 00 00 00 ca 00 00 00 77 00 00 00 00 00 00 00 73 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 7a 00 00 00 d6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 f6 00 00 00 fc 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 f7 00 Data Ascii: (& (N( swsz
2024-04-26 04:12:12 UTC	1369	IN	Data Raw: 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 37 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 36 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 2f 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 31 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 22 00 00 00 00 00 00 00 02 00 00 00 2f 00 00 00 35 00 00 00 35 00 00 00 30 00 00 00 04 00 00 00 00 00 00 00 18 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 Data Ascii: !76!66!/1"/550
2024-04-26 04:12:12 UTC	1369	IN	Data Raw: ff 00 00 00 ff 00 00 00 47 00 00 00 8d 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 a4 00 00 00 ac 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: G
2024-04-26 04:12:12 UTC	1369	IN	Data Raw: 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 Data Ascii: S.SS.S
2024-04-26 04:12:12 UTC	1369	IN	Data Raw: 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 19 00 00 00 23 00 00 00 a3 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 fe 00 00 00 f3 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f3 00 00 00 fe 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 b4 00 00 00 93 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii: #
2024-04-26 04:12:12 UTC	510	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50332	216.239.36.54	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	386	OUT	GET /sgtm_tag_monitoring HTTP/1.1 Host: us-central1-sq-sgtm-prod.cloudfunctions.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:12 UTC	331	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Function-Execution-Id: yyneab8z7hjy X-Cloud-Trace-Context: 2c822ddc01f11c3033203c92e3bed372 Date: Fri, 26 Apr 2024 04:12:12 GMT Server: Google Frontend Content-Length: 181 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:12 UTC	181	IN	Data Raw: 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3a 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 45 69 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 6f 76 65 72 6c 6f 61 64 65 64 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e Data Ascii: 500 Internal Server Error: The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50334	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	760	OUT	POST /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive Content-Length: 1419 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json sec-ch-ua-mobile: ?0 authorization: Basic YTVlZWQxZmQtYThiNy00MjM3LTgxYjYtNTAxMTE0MzdjMjZmOg== User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-request-id: v1:inGTxFQARLBS8cboNrqQM2/LNkmuhZ8/6pZQHFtov4I= sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:12 UTC	1419	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 73 6b 74 6f 70 20 77 65 62 22 7d 2c 22 6f 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 30 22 7d 2c 22 70 61 67 65 22 3a 7b 22 70 61 74 68 22 3a 22 2f 73 69 67 6e 75 70 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 73 69 67 6e 75 70 3f 61 70 70 3d 77 65 65 62 6c 79 26 63 6f 75 6e 74 72 79 5f 63 6f 64 65 3d 75 73 26 72 65 74 75 72 6e 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 65 62 6c 79 2e 63 6f 6d 25 32 46 61 70 70 25 32 46 66 72 6f 6e 74 2d 64 6f 6f 72 25 32 46 6c 6f 67 69 6e 25 32 46 73 71 75 61 72 65 25 33 46 73 Data Ascii: {"batch":[{"context":{"app":{"name":"desktop web"},"os":{"name":"Windows","version":"10"},"page":{"path":"/signup","url":"https://squareup.com/signup?app=weebly&country_code=us&return_to=https%3A%2F%2Fwww.weebly.com%2Fapp%2Ffront-door%2Flogin%2Fsquare%3Fs
2024-04-26 04:12:13 UTC	624	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: authorization, content-type, x-forwarded-for, x-request-id, x-cdp-batch-id, X-Allow-Cookies, X-Block-Cookies Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: https://squareup.com Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:13 GMT Content-Length: 16 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:13 UTC	16	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 6f 6b 22 7d Data Ascii: {"message":"ok"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50331	50.19.89.137	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	625	OUT	OPTIONS /sdk/1/environments/mVfPI-96JuPi/config HTTP/1.1 Host: api.sprig.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type,userleap-platform,x-ul-environment-id,x-ul-installation-method,x-ul-sdk-version,x-ul-visitor-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:12 UTC	500	IN	HTTP/1.1 204 No Content timing-allow-origin: https://0.0.com, https://0.1.com, https://1.0.com, https://1.1.com access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type,userleap-platform,x-ul-environment-id,x-ul-installation-method,x-ul-sdk-version,x-ul-visitor-id date: Fri, 26 Apr 2024 04:12:12 GMT x-envoy-upstream-service-time: 11 server: istio-envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50333	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:13 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:13 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50336	13.35.116.107	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	518	OUT	GET /log?vendor=liveramp&user_id=Xc1297ncvv5NlmIHdybrREjpassQnaAvoOjsak8IxwRCYw8Jo HTTP/1.1 Host: segments.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1d7ba62e-f45b-48b1-a4b3-b753132c722f; tuuid_lu=1714104726\|ix:0\|mctv:0\|rp:0
2024-04-26 04:12:13 UTC	316	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Fri, 26 Apr 2024 04:12:12 GMT X-Cache: Miss from cloudfront Via: 1.1 f7e7b00c5c66a4e43041ba24c378d07a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C2 X-Amz-Cf-Id: uc-e1IqXu-f4zq4fGUTrVC9Wym5kgQrjT4FUKvUzuggzAiYI6-x43w==
2024-04-26 04:12:13 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50337	162.159.137.66	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:12 UTC	2735	OUT	GET /favicon.ico HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; _dd_s=rum=1&id=e2672d6c-f9f3-4636-a788-7e47625edb7c&created=1714104714934&expire=1714105614934; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; dajs_user_id_optimizely=null; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; KP_UIDz-ssn=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; KP_UIDz=02wcdtSJ8FWrcuDlgzabaBtIInBtzr67zvGamMGDWwz03fzuQp0hhlyAzajApAFIfKhtVCeEedWIwJltcoB8h4t4BwqyL6UBfWQolETdnB24MWz61TGVqrh7K2PWS13qtoQeaq2W4s3z0tOzb11m5grq1btdr5lZaIW71ePSjh; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:13 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 04:12:13 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 6518 Connection: close CF-Ray: 87a3bbb69a77a56f-MIA CF-Cache-Status: BYPASS Accept-Ranges: bytes Cache-Control: no-store Last-Modified: Fri, 19 Apr 2024 18:31:36 GMT Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-FL; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /favicon.ico x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Server: cloudflare
2024-04-26 04:12:13 UTC	532	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 00 00 00 c8 00 00 00 d2 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 d2 00 00 00 ca 00 00 00 77 00 00 00 00 00 00 00 73 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 7a 00 00 00 d6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 f6 00 00 00 fc 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 f7 00 Data Ascii: (& (N( swsz
2024-04-26 04:12:13 UTC	1369	IN	Data Raw: 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 37 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 36 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 2f 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 31 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 22 00 00 00 00 00 00 00 02 00 00 00 2f 00 00 00 35 00 00 00 35 00 00 00 30 00 00 00 04 00 00 00 00 00 00 00 18 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 Data Ascii: !76!66!/1"/550
2024-04-26 04:12:13 UTC	1369	IN	Data Raw: ff 00 00 00 ff 00 00 00 47 00 00 00 8d 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 a4 00 00 00 ac 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: G
2024-04-26 04:12:13 UTC	1369	IN	Data Raw: 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 Data Ascii: S.SS.S
2024-04-26 04:12:13 UTC	1369	IN	Data Raw: 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 19 00 00 00 23 00 00 00 a3 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 fe 00 00 00 f3 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f3 00 00 00 fe 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 b4 00 00 00 93 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii: #
2024-04-26 04:12:13 UTC	510	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50338	50.19.89.137	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:13 UTC	780	OUT	GET /sdk/1/environments/mVfPI-96JuPi/config HTTP/1.1 Host: api.sprig.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-ul-visitor-id: 3ad56939-5bf1-4785-b4cc-e18f8e86ab2e sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-ul-installation-method: web-gtm x-ul-sdk-version: 2.27.0 x-ul-environment-id: mVfPI-96JuPi userleap-platform: web sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:13 UTC	388	IN	HTTP/1.1 200 OK timing-allow-origin: https://0.0.com, https://0.1.com, https://1.0.com, https://1.1.com access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 11197 etag: W/"2bbd-HrgMUzYmSS936+rkzQRi0kpz+nc" vary: Accept-Encoding date: Fri, 26 Apr 2024 04:12:13 GMT x-envoy-upstream-service-time: 4 server: istio-envoy connection: close
2024-04-26 04:12:13 UTC	11197	IN	Data Raw: 7b 22 62 6f 72 64 65 72 22 3a 22 23 30 30 36 41 46 46 22 2c 22 70 61 67 65 55 72 6c 45 76 65 6e 74 73 22 3a 5b 7b 22 69 64 22 3a 31 37 39 36 37 38 32 35 30 37 2c 22 6d 61 74 63 68 54 79 70 65 22 3a 22 65 78 61 63 74 6c 79 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 75 73 2f 65 6e 2f 70 6f 69 6e 74 2d 6f 66 2d 73 61 6c 65 2f 72 65 73 74 61 75 72 61 6e 74 73 2f 62 61 72 73 22 7d 2c 7b 22 69 64 22 3a 31 37 39 36 37 38 32 35 30 36 2c 22 6d 61 74 63 68 54 79 70 65 22 3a 22 65 78 61 63 74 6c 79 22 2c 22 70 61 74 74 65 72 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 71 75 61 72 65 75 70 2e 63 6f 6d 2f 75 73 2f 65 6e 2f 70 6f 69 6e 74 2d 6f 66 2d 73 61 6c 65 2f 72 65 73 74 61 75 72 61 6e 74 73 2f 66 61 73 74 2d Data Ascii: {"border":"#006AFF","pageUrlEvents":[{"id":1796782507,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/bars"},{"id":1796782506,"matchType":"exactly","pattern":"https://squareup.com/us/en/point-of-sale/restaurants/fast-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50343	34.98.67.114	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:13 UTC	369	OUT	GET /v1/batch HTTP/1.1 Host: data-platform.squarecloudservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:13 UTC	381	IN	HTTP/1.1 403 Forbidden Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 26 Apr 2024 04:12:13 GMT Content-Length: 75 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 04:12:13 UTC	75	IN	Data Raw: 7b 22 47 72 61 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 52 65 61 73 6f 6e 22 3a 22 4d 69 73 73 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 22 4d 69 73 73 69 6e 67 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 5d 7d 0a Data Ascii: {"Granted":false,"Reason":"Missing capabilities","MissingCapabilities":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50342	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:13 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:14 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:13 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50344	50.19.89.137	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:14 UTC	677	OUT	OPTIONS /sdk/1/environments/mVfPI-96JuPi/visitors/3ad56939-5bf1-4785-b4cc-e18f8e86ab2e HTTP/1.1 Host: api.sprig.com Connection: keep-alive Accept: / Access-Control-Request-Method: PUT Access-Control-Request-Headers: content-type,userleap-platform,x-ul-environment-id,x-ul-installation-method,x-ul-sdk-version,x-ul-user-id,x-ul-visitor-id Origin: https://squareup.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:14 UTC	513	IN	HTTP/1.1 204 No Content timing-allow-origin: https://0.0.com, https://0.1.com, https://1.0.com, https://1.1.com access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: content-type,userleap-platform,x-ul-environment-id,x-ul-installation-method,x-ul-sdk-version,x-ul-user-id,x-ul-visitor-id date: Fri, 26 Apr 2024 04:12:14 GMT x-envoy-upstream-service-time: 23 server: istio-envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50345	3.228.185.195	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:14 UTC	375	OUT	GET /sdk/1/environments/mVfPI-96JuPi/config HTTP/1.1 Host: api.sprig.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:14 UTC	385	IN	HTTP/1.1 400 Bad Request timing-allow-origin: https://0.0.com, https://0.1.com, https://1.0.com, https://1.1.com access-control-allow-origin: * content-type: text/plain; charset=utf-8 content-length: 11 etag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8" vary: Accept-Encoding date: Fri, 26 Apr 2024 04:12:14 GMT x-envoy-upstream-service-time: 4 server: istio-envoy connection: close
2024-04-26 04:12:14 UTC	11	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50347	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:14 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:14 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:14 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50349	141.226.224.48	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:14 UTC	2181	OUT	OPTIONS /1543392/log/3/unip?en=pre_d_eng_tb&tos=6147&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1714104733314&mrir=tto&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1 Host: trc-events.taboola.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://tealium-f.squarecdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:15 UTC	445	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 04:12:14 GMT Content-Length: 0 Connection: close Allow: GET, HEAD, POST, TRACE, OPTIONS P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: attribution-reporting-eligible

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50350	50.19.89.137	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:15 UTC	891	OUT	PUT /sdk/1/environments/mVfPI-96JuPi/visitors/3ad56939-5bf1-4785-b4cc-e18f8e86ab2e HTTP/1.1 Host: api.sprig.com Connection: keep-alive Content-Length: 49 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-ul-user-id: f4d668d2-779c-4df7-a4fc-07c00f1a3ade x-ul-visitor-id: 3ad56939-5bf1-4785-b4cc-e18f8e86ab2e sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-ul-installation-method: web-gtm x-ul-sdk-version: 2.27.0 x-ul-environment-id: mVfPI-96JuPi userleap-platform: web sec-ch-ua-platform: "Windows" Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:15 UTC	49	OUT	Data Raw: 7b 22 75 73 65 72 49 64 22 3a 22 66 34 64 36 36 38 64 32 2d 37 37 39 63 2d 34 64 66 37 2d 61 34 66 63 2d 30 37 63 30 30 66 31 61 33 61 64 65 22 7d Data Ascii: {"userId":"f4d668d2-779c-4df7-a4fc-07c00f1a3ade"}
2024-04-26 04:12:15 UTC	720	IN	HTTP/1.1 204 No Content timing-allow-origin: https://0.0.com, https://0.1.com, https://1.0.com, https://1.1.com access-control-allow-origin: * authorization: Bearer eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJndCI6InZpc2l0b3IiLCJpZCI6Im1WZlBJLTk2SnVQaSIsInZpZCI6IjNhZDU2OTM5LTViZjEtNDc4NS1iNGNjLWUxOGY4ZTg2YWIyZSIsImlhdCI6MTcxNDEwNDczNSwiZXhwIjoxNzE0Mjc3NTM1fQ.e03WjmeZp0k0DuYEgnCGYue1ym8u-w5JsDXjAzEq1nKMwiktax9VsAT3hdaa561N2zVF1dY8ljC-QFvhpZAmew x-ul-visitor-id: 3ad56939-5bf1-4785-b4cc-e18f8e86ab2e access-control-expose-headers: Authorization,x-ul-visitor-id etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI" date: Fri, 26 Apr 2024 04:12:15 GMT x-envoy-upstream-service-time: 53 server: istio-envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50351	54.148.46.119	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:15 UTC	613	OUT	POST /v2/c HTTP/1.1 Host: api.neuro-id.com Connection: keep-alive Content-Length: 406 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://squareup.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 04:12:15 UTC	406	OUT	Data Raw: 6b 65 79 3d 6b 65 79 5f 6c 69 76 65 5f 4a 78 72 46 4b 43 71 7a 59 64 64 47 75 36 69 4f 65 6f 72 39 73 45 49 36 26 69 64 3d 64 32 37 66 36 37 37 65 38 34 31 34 26 73 65 73 73 69 6f 6e 49 64 3d 62 30 32 31 62 30 32 65 2d 65 66 61 34 2d 34 37 64 39 2d 39 33 38 63 2d 32 30 37 61 61 37 32 33 66 33 64 37 26 63 6c 69 65 6e 74 49 64 3d 36 34 32 37 31 35 30 37 2d 64 66 65 31 2d 34 30 65 36 2d 38 35 30 36 2d 35 66 32 36 34 31 62 66 39 30 32 31 26 75 73 65 72 49 64 3d 6e 75 6c 6c 26 70 61 67 65 49 64 3d 64 32 37 66 36 36 35 65 36 38 30 31 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 71 75 61 72 65 75 70 2e 63 6f 6d 25 32 46 73 69 67 6e 75 70 26 6a 73 56 65 72 73 69 6f 6e 3d 33 2e 32 2e 30 26 65 76 65 6e 74 73 3d 57 31 73 31 4d 44 63 73 62 6e 56 73 62 Data Ascii: key=key_live_JxrFKCqzYddGu6iOeor9sEI6&id=d27f677e8414&sessionId=b021b02e-efa4-47d9-938c-207aa723f3d7&clientId=64271507-dfe1-40e6-8506-5f2641bf9021&userId=null&pageId=d27f665e6801&url=https%3A%2F%2Fsquareup.com%2Fsignup&jsVersion=3.2.0&events=W1s1MDcsbnVsb
2024-04-26 04:12:15 UTC	248	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 04:12:15 GMT Connection: close X-Request-Id: req_1s0CwZ3ItuLRP6Nr Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://squareup.com Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50352	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:15 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:15 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:15 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50353	141.226.224.48	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:15 UTC	2401	OUT	GET /1543392/log/3/unip?en=pre_d_eng_tb&tos=6147&scd=0&ssd=1&est=1714104727166&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1714104733314&mrir=tto&vi=1714104727158&ref=null&cv=20240421-4-RELEASE&item-url=https%3A%2F%2Ftealium-f.squarecdn.com%2Ftealium-5e515d1680596fd07a5e36ea40f472bf.html%3Fcompleted_activation%3Dfalse%26variant%3Dweebly-sso%26country_code%3Dus%26page_url%3Dhttps%253A%252F%252Fsquareup.com%252Fsignup%253Fapp%253Dweebly%2526country_code%253Dus%2526return_to%253Dhttps%25253A%25252F%25252Fwww.weebly.com%25252Fapp%25252Ffront-door%25252Flogin%25252Fsquare%25253Fsso_intent%25253Dsignup%2526v%253Dweebly-sso%2526weebly_sso_enabled%253Dtrue%26env%3Dprod%26referrer%3D%26avt%3Df4d668d2-779c-4df7-a4fc-07c00f1a3ade%23Y29tcGxldGVkX2FjdGl2YXRpb249ZmFsc2UmdmFyaWFudD13ZWVibHktc3NvJmNvdW50cnlfY29kZT11cyZwYWdlX3VybD1odHRwcyUzQSUyRiUyRnNxdWFyZXVwLmNvbSUyRnNpZ251cCUzRmFwcCUzRHdlZWJseSUyNmNvdW50cnlfY29kZSUzRHVzJTI2cmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3d3cud2VlYmx5LmNvbSUyNTJGYXBwJTI1MkZmcm9udC1kb29yJTI1MkZsb2dpbiUyNTJGc3F1YXJlJTI1M0Zzc29faW50ZW50JTI1M0RzaWdudXAlMjZ2JTNEd2VlYmx5LXNzbyUyNndlZWJseV9zc29fZW5hYmxlZCUzRHRydWUmZW52PXByb2QmcmVmZXJyZXI9JmF2dD1mNGQ2NjhkMi03NzljLTRkZjctYTRmYy0wN2MwMGYxYTNhZGU%3D&ler=other HTTP/1.1 Host: trc-events.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: trigger sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tealium-f.squarecdn.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tealium-f.squarecdn.com/tealium-5e515d1680596fd07a5e36ea40f472bf.html?completed_activation=false&variant=weebly-sso&country_code=us&page_url=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&env=prod&referrer=&avt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a; receive-cookie-deprecation=1
2024-04-26 04:12:15 UTC	926	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 04:12:15 GMT Content-Type: image/gif Connection: close P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://tealium-f.squarecdn.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:15 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=9a1dfb72-3cff-4a47-9bcd-f3ee30689a16-tuctd24af1a;Version=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:15 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Set-Cookie: receive-cookie-deprecation=1;Path=/;Domain=.taboola.com;Expires=Sat, 26-Apr-2025 04:12:15 GMT;Secure;HttpOnly;SameSite=None;Partitioned Cache-Control: no-cache Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50355	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:16 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:16 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:16 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50357	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:17 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:17 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:17 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50360	18.144.72.236	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:18 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:18 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:18 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port
409	192.168.2.4	50363	18.144.72.236	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:18 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:19 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:19 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.4	50365	18.144.72.236	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 04:12:19 UTC	2310	OUT	GET /events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 HTTP/1.1 Host: capi.squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-FL; _savt=f4d668d2-779c-4df7-a4fc-07c00f1a3ade; __cf_bm=_VC279cJ6vXojpoLZgBJN1noMvdwPXqBRSKlVFLKIzE-1714104710-1.0.1.1-5knc5c_RIngqSB2WynaoGyzgArPFdwN5FAtRm5YMRh1MX4n9Gtj.5XZGfqgk9tnILrujlqcfymQ1Q1YnkoxNLQ; nid_cid=64271507-dfe1-40e6-8506-5f2641bf9021; nid_sid=b021b02e-efa4-47d9-938c-207aa723f3d7; dajs_user_id=null; dajs_group_id=null; da_js_user_type=%22anonymous_visitor%22; dajs_anonymous_id=%22f4d668d2-779c-4df7-a4fc-07c00f1a3ade%22; optimizelyEndUserId=oeu1714104716359r0.9702665512714941; _sqweb_session=eyJ1c2VyX3Nlc3Npb25fdG9rZW4iOiIiLCJzZXNzaW9uX2lkIjoiODdkYmM3ZjJmMWIyNGQzOWI2MTJlNDRkYjFhNjNkYzQiLCJfY3NyZl90b2tlbiI6InpuZ05HMWtUbElEOGtHWGpSemVOQUpodUtsUXZKZDlOSFlrWGlUbGMxUmsifQ%3D%3D--0ecd178f8d76a1cc8712fe8e9a22f0ff17b469271553f887ca5e6c5686b94dee4d74b55fbd3a30e8641936c36b61ad9ccb4fccb8d01d7682309693dc501f865f; _js_csrf=zngNG1kTlID8kGXjRzeNAJhuKlQvJd9NHYkXiTlc1Rk; _gid=GA1.2.775248889.1714104719; _gat=1; __utma=141992880.171990837.1714104719.1714104720.1714104720.1; __utmc=141992880; __utmz=141992880.1714104720.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none); __utmt=1; __utmb=141992880.1.10.1714104720; _mkto_trk=id:424-IAB-218&token:_mch-squareup.com-1714104720339-69522; _gcl_au=1.1.588246385.1714104721; _ga=GA1.1.171990837.1714104719; _ga_65K13HQ4KD=GS1.1.1714104722.1.0.1714104722.60.0.0; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Apr+26+2024+06%3A12%3A03+GMT%2B0200+(Central+European+Summer+Time)&version=202301.2.0&isIABGlobal=false&hosts=&consentId=4168f275-2402-49c0-bc34-5a8c262e3956&interactionCount=0&landingPath=https%3A%2F%2Fsquareup.com%2Fsignup%3Fapp%3Dweebly%26country_code%3Dus%26return_to%3Dhttps%253A%252F%252Fwww.weebly.com%252Fapp%252Ffront-door%252Flogin%252Fsquare%253Fsso_intent%253Dsignup%26v%3Dweebly-sso%26weebly_sso_enabled%3Dtrue&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _fbp=fb.1.1714104725363.1002127388
2024-04-26 04:12:20 UTC	295	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 04:12:20 GMT Content-Length: 0 Connection: close cache-control: no-store location: https://capi.squareup.com/events/95625b9f3d9e3925ceace0bce9d7e5a4240522072702119357fdf7cb8811fa01 Strict-Transport-Security: max-age=15724800; includeSubDomains

Target ID:	0
Start time:	06:10:40
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:10:42
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2016,i,13903977276752297050,1803456697234074248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:10:45
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.painrehabilitation.com.au/contact.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.painrehabilitation.com.au/contact.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Windows Analysis Report
http://www.painrehabilitation.com.au/contact.html